Sr. DevOps Security Engineer at The Cigna Group

Kirkland, Washington, United States -

Full Time

Start Date

Immediate

Expiry Date

11 Jan, 26

Salary

201300.0

Posted On

13 Oct, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, AWS, Vulnerability Assessment, Risk Management, Secure Coding, Incident Management, Automation, Infrastructure as Code, NIST CSF, HITRUST, CIS Controls, OWASP, SAST, DAST, DevOps, SRE

Industry

Hospitals and Health Care

Description

The job profile for this position is Infrastructure Engineering Senior Advisor, which is a Band 4 Senior Contributor Career Track Role. Excited to grow your career? We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply! Our people make all the difference in our success. Verity Solutions is an innovative leader in pharmacy services, providing comprehensive solutions for federal 340B drug pricing program management and more. Our customers include large health systems, community health centers, retail and specialty pharmacies. Verity Solutions is a Cigna Group company within the Evernorth Health Services division and is headquartered in Kirkland, WA. Job Summary: Are you interested in joining a company passionate about helping those who make a difference in patient lives every day? Do you have strong security experience with cloud-based infrastructure and applications? Do you like an automation-first approach to problem solving and enjoy working on engineering solutions as part of an agile team? Join Verity’s DevOps Engineering Team in designing, maintaining, supporting, securing, and extending an industry-leading SaaS platform. Job Duties and Responsibilities: Responsible for cybersecurity design, adherence, management, and ownership of best practices to reduce risk by securing Verity’s AWS cloud platform environments. Identifying and deploying cybersecurity measures by continuously performing vulnerability assessment and risk management. Promote a security first mindset within the development team, advocate for secure coding practices, and guide the organization towards secure-by-design principles. Support maintaining our security assessments and certifications such as HITRUST & SOC. Primary liaison with the Enterprise Information Protection Team to manage policy compliance and issue remediation. Support core cloud infrastructure systems: Network, Servers, Active Directory, Linux/Windows Server OS, Web/API Servers, Mongo DB, and similar systems. Design code-based solutions to automate manual tasks, threat response, vulnerability management, business processes, and to support new initiatives. Lead incident, problem, and event management support of our infrastructure, systems, and services. Problem resolution support may be required on a rotating 24x7 basis for critical incidents. Develop, implement, and maintain robust security monitoring and alerting systems such as (Splunk, Grafana, Dynatrace). Qualifications: BS or MS degree in related field or equivalent experience. 8+ years of enterprise experience as a Security Engineer or similar role managing AWS resources. Experience with NIST CSF, HITRUST CSF, CIS Controls, OWASP, and other security frameworks. Experience with SAST, DAST, Continuous Vulnerability Management (CVM), and IPS/IDS/AV/AM tools. Programming proficiency in developing tools, automation services, infrastructure as code. DevOps / SRE Engineering experience with implementing and supporting core AWS services: EC2, RDS, S3, Cloud Watch, and similar services in a 24x7 production environment. Certified Information Systems Security Professional (CISSP) certification is preferred but not required. If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload. For this position, we anticipate offering an annual salary of 120,800 - 201,300 USD / yearly, depending on relevant factors, including experience and geographic location. This role is also anticipated to be eligible to participate in an annual bonus plan. We want you to be healthy, balanced, and feel secure. That’s why you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k) with company match, company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year and paid holidays. For more details on our employee benefits programs, visit Life at Cigna. Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws. Please note that you must meet our posting guidelines to be eligible for consideration. Policy can be reviewed at this link. Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.

Responsibilities

Responsible for cybersecurity design and management of best practices to secure Verity’s AWS cloud platform environments. Lead incident management support and develop security monitoring systems.