Information Protection Advisor- Hybrid

Cigna Healthcare•Bloomfield, CT

7d•$103,100 - $171,900•Hybrid

About The Position

Cigna-Evernorth Services Inc. seeks an Information Protection Advisor for the Bloomfield, CT location to identify, evaluate, and lead technical security analyses to ensure that all systems and processes meet applicable information security requirements. This role involves embedding security assessments into development and operational workflows, providing in-depth technical analysis of security requirements, and collaborating with engineering teams for secure design and implementation. The advisor will partner with internal stakeholders to define security requirements, assess the feasibility of scalable security controls, and promote the integration of security into development and operational practices. Additionally, the role includes conducting comprehensive security assessments of third-party service providers, evaluating their security posture, and ensuring alignment with organizational standards and industry best practices, including supply chain risk considerations. The position also focuses on designing and implementing streamlined, automated security processes, applying creative problem-solving to improve security posture while enabling business agility, and providing strategic security guidance to cross-functional teams and leadership. The advisor will serve as a thought leader in secure development and operations practices, aligning security initiatives with broader business goals and fostering a culture of shared responsibility for security. This is a hybrid work schedule position.

Requirements

Bachelor’s degree in Computer Science or related field and 2 years of experience.
Experience with Automating Security solutions in a CI/CD pipeline.
Experience integrating technologies including Checkmarx, BlackDuck, & NowSecure, via scripts and triggers.
Experience with Static application security testing (SAST) using Checkmarx.
Experience with Dynamic application security testing (DAST) using RedHat ACS, BlackDuck, & PrismaCloud.
Experience with Application security posture management using Apiiro.
Experience with False positive triage automation.
Experience with SBOM Evaluation.
Experience with Python-based bots for troubleshooting and bulk updates.
Experience with Ansible playbooks for integration and migration tasks.
Experience with CI/CD tools including Azure DevOps and Jenkins.
Experience with Docker container security practices.
Experience with Authentication and Authorization design.
Experience with Vulnerability management.
Experience integrating security into design and implementation phases.
Experience referencing security standards including ISO27001, SOC 2 Type II, Open-Source Licensing.

Responsibilities

Embed security assessments into development and operational workflows to support continuous compliance.
Provide in-depth technical analysis of security requirements to protect information processed, stored, or transmitted across systems.
Collaborate with engineering teams to ensure secure design and implementation throughout the system lifecycle.
Partner with internal stakeholders to define security requirements and assess the feasibility of implementing scalable security controls.
Promote the integration of security into development and operational practices to support secure-by-design principles.
Conduct comprehensive security assessments of third-party service providers and outsourced solutions.
Evaluate their security posture and ensure alignment with organizational standards and industry best practices, including supply chain risk considerations.
Design and implement streamlined, automate security processes that enhance the efficiency and effectiveness of security controls.
Apply creative problem-solving and strategic thinking to improve security posture while enabling business agility.
Provide strategic security guidance to cross-functional teams an leadership.
Serve as a thought leader in secure development and operations practices, aligning security initiatives with broader business goals and fostering a culture of shared responsibility for security.