Remote AppSec Engineer & Info Protection Advisor

The Cigna Group; Bloomfield (CT); Remote; USD 156,000 - 172,000; Full time

Benefits offered by this job

Health benefits

401(k) match

Tuition reimbursement

Paid time off

Job summary

The Cigna Group is seeking an Info Protection Advisor – App Security Eng to partner with Bloomfield-based software teams and guide secure design, development, and code practices for cloud-hosted and open-source apps.

You will inspect code for security issues, drive secure coding standards, and embed security into CI/CD with DevSecOps practices while enabling telecommuting where feasible.

Qualifications

• Bachelor’s degree in Computer Science or related field with 5 years of experience.
• Experience integrating security at every phase of the SDLC.
• Identify threats and vulnerabilities early in design phases.
• Use SAST/DAST tools to analyze source code and running apps.
• Apply OWASP Top 10 and SEI CERT standards across languages.
• Remediate vulnerabilities with Nessus, Qualys, Burp Suite.
• Secure identity management using OAuth, SAML, and JWT.
• Embed security into CI/CD pipelines and DevSecOps.

Responsibilities

• Assist with inspecting application code for security issues and CI/CD integration.
• Act as SME to improve security practices in product design and SDLC.
• Perform focused risk assessments of services and architectures.
• Support secure code reviews and AppSec assessments for remediation education.
• Help implement automated security controls in CI/CD pipelines.
• Educate development teams on remediation of SAST/DAST findings.
• Establish and maintain secure coding standards and practices.
• Telecommuting permitted.

Skills

Secure SDLC integration

Threat modeling

SAST/DAST tooling

OWASP Top 10

Nessus/Qualys/Burp Suite

OAuth/SAML/JWT

CI/CD DevSecOps

GitHub Actions

Jenkins

Cloud/container security

Education

Bachelor’s degree in Computer Science or related field

Tools

Nessus

Qualys

Burp Suite

GitHub Actions

Jenkins

Job description

The Cigna Group is seeking an Info Protection Advisor – App Security Eng to partner with Bloomfield-based software teams and guide secure design, development, and code practices for cloud-hosted and open-source apps.

You will inspect code for security issues, drive secure coding standards, and embed security into CI/CD with DevSecOps practices while enabling telecommuting where feasible.