Info Protection Advisor, App Security Eng

Cigna

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Bloomfield, CT
Salary: $155,958–$171,900 / yr
Employment: Full-time
Posted: 14 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $178k

This role $164k

$122k $222k

below market most similar roles pay here above market

This role pays less than 56% of similar roles. Most pay $142,976–$212,400 — the blue band above. At the midpoint, this role pays about $164k versus about $178k for comparable roles.

Based on 240 similar postings.

Employer

About Cigna

The Cigna Group is a global health company, rebranded in 2023, that serves over 185 million customer relationships across 30+ countries.

Cigna currently has 73 open roles on FindRole.

Listed pay typically runs $148,950–$205,800 across 24 roles with salary data.

Most-posted roles

View all roles at Cigna

At a glance

TL;DR · Info Protection Advisor, App Security Eng

Role Posting Log in to save

The Info Protection Advisor-App Security Eng- Hybrid joins the team to lead and support application security activities for cloud-hosted and open-source applications. This role involves collaborating with software development teams to guide the design, development, and security of code and repositories. Key responsibilities include performing focused risk assessments, conducting secure code reviews, and building a new framework for faster, more secure deployments via CI/CD integration. The position requires expertise in integrating security into the software development lifecycle, utilizing SAST, DAST, Nessus, Qualys, and Burp Suite. Candidates must apply secure coding standards like OWASP Top 10 and SEI Cert while managing identity through OAuth, SAML, and JWT. Technical skills include GitHub Actions, Jenkins, container security, and ensuring compliance with NIST and ISO 27001 standards.

Skills

Application Security DevSecOps CI/CD SAST DAST SCA OWASP Top 10 Nessus Qualys Burp Suite GitHub Actions Jenkins OAuth SAML JWT Container Security NIST ISO 27001 SDLC

What you'll do

Inspect application code for security issues and perform assessments on software development lifecycle practices.
Perform risk assessments on new services and technologies to identify design gaps and recommend enhancements.
Conduct secure code reviews and AppSec assessments to educate development teams on vulnerabilities.
Implement and manage automated security controls within CI/CD pipelines and DevSecOps workflows.
Provide guidance on remediating vulnerabilities detected by SAST, SCA, and DAST security tools.
Establish and maintain secure coding standards and best practices for development teams.
Secure applications deployed in cloud environments, including container security and identity management.

What we're looking for

Bachelor’s degree in Computer Science or a related field.
5 years of experience in the field.
Experience integrating security at every phase of the Software Development Lifecycle.
Experience identifying potential threats and vulnerabilities early in the design phase.
Experience using SAST/DAST tools and techniques to analyze source code and running applications.
Experience utilizing secure coding standards, including OWASP Top 10 and SEI Cert, across multiple languages.
Experience identifying, prioritizing, and remediating vulnerabilities using tools including Nessus, Qualys, and Burp Suite.
Experience with secure identity management using tools including OAuth, SAML, and JWT.

Save