Description
We are seeking a Cyber Security Senior Analyst to join our team at Evernorth Health Services, a division of The Cigna Group. As a Cyber Security Senior Analyst, you will be responsible for conducting vulnerability assessments, threat modeling, penetration tests, and red team campaigns of Cigna's IT infrastructure and applications.
Your main objectives will be:
- Execute internal and external penetration tests against corporate web applications, APIs, networks, infrastructure, and operating systems to discover vulnerabilities
- Execute mobile application penetration tests for both Android and iOS-based devices
- Execute penetration tests in cloud-hosted environments
- Create comprehensive and accurate penetration testing reports with recommendations for remediation and communicate risk findings with development and infrastructure teams
- Develop scripts, tools, or methodologies to enhance Cigna's penetration testing processes
- Work as part of a team to identify risks, communicate to key stakeholders, and provide value to the organization
To be successful in this role, you will need:
- High school diploma; Bachelor's degree preferred
- Over 5-8 years of experience in Cyber Security, with at least 3 years of experience in penetration testing
- Strong analytical and problem-solving skills, with the ability to 'think outside the box'
- Ability to work in a flexible environment where requirements and procedures continuously evolve
- Strong oral and written communication skills, including the ability to prepare documentation and presentations for technical and non-technical audiences
- Demonstrated ability to work as both an individual contributor and a team player in a fast-paced environment
- Knowledge of Windows and *nix-based operating systems
- Understanding of core Internet protocols and the OSI model
- Understanding of encryption fundamentals
- Proficiency in application vulnerability assessment tools and network and server assessment tools
- Understanding of web application frameworks
- Proficiency in manual and automated techniques for penetration testing and executing vulnerability assessments
- Coding/scripting experience in modern scripting languages
- Mobile application coding experience with Android/iOS-based platforms