Description
Cigna-Evernorth Services Inc. seeks an Info Protection Advisor – Application Security Engineer for its Bloomfield, CT location to collaborate with software development teams to lead and support Application Security activities. The goal is to guide the design, development, and security of code and code repositories for cloud-hosted and open-source applications.
Responsibilities:
- Inspect application code for security issues and build a new framework to help software developers deploy faster and more securely through CI/CD Integration.
- Perform assessments on existing software development lifecycle practices to ensure security standards are met.
- Act as a subject matter expert on application security to improve and integrate security best practices into product design and software development lifecycles.
- Conduct focused risk assessments of existing or new services and technologies, identify design gaps, risks, and recommend security enhancements.
- Assist development teams with secure code reviews and other AppSec assessments to educate them on security weaknesses and vulnerabilities.
- Implement and manage automated security controls as part of CICD pipelines and DevSecOps philosophies.
- Educate development teams on the remediation of vulnerabilities detected in SAST, SCA, and DAST security tools.
- Establish and maintain secure coding standards and best practices to provide guidance and training to development teams.
Qualifications:
- Bachelor’s degree in Computer Science or related field.
- 5 years of experience integrating security at every phase of the Software Development Lifecycle.
- Experience with SAST/DAST tools and techniques to analyze source code and running applications for vulnerabilities.
- Knowledge of secure coding standards, including OWASP Top 10 and SEI Cert, across multiple languages.
- Familiarity with identifying, prioritizing, and remediating vulnerabilities using tools like Nessus, Qualys, and Burp Suite.
- Understanding of secure identity management, including authentication, authorization mechanisms, and role-based controls.
- Experience with embedding security into CI/CD pipelines and securing applications deployed in cloud environments.
Benefits:
- Comprehensive health-related benefits, including medical, vision, dental, and well-being and behavioral health programs.
- 401(k), company-paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year, paid holidays, and leaves of absence.
Salary Range: $155,958-$171,900/year