{"schemaVersion":"jobsearcher.job.v1","id":"21c37a657340988b257d51f6","url":"https://jobsearcher.com/jobs/21c37a657340988b257d51f6","canonicalUrl":"https://jobsearcher.com/jobs/21c37a657340988b257d51f6","title":"Sr. Cloud Security Engineer","description":"Location/Schedule:Bloomfield, CT onsite minimum of 3 days per week, 9:00 AM - 5:30 PM M-F with occasional off-hoursRole Summary:This role is a hands-on cloud and application security engineering position focused on modernizing and operating AWS WAF, API security, and application security posture at scale. The work emphasizes automation, policy-as-code, AI assisted analysis, and operational execution, with minimal emphasis on leadership or executive engagement. The contractor will design, build, tune, and operate AWS WAF and API security capabilities, migrate WAF policy management to GitHub based CI/CD, enhance visibility through AWS Security Lake, and automate remediation workflows to reduce manual effort and improve detection fidelity.Primary Responsibilities:Implement, operate, and tune AWS WAF, Firewall Manager, Shield Advanced, and related AWS security services.Migrate and maintain AWS WAF policies as code using GitHub SaaS, including CI/CD workflows, versioning, testing, and rollback.Build automation (Terraform, Python) to deploy, manage, and validate WAF and application security controls at scale.Integrate WAF, API, and application security telemetry into AWS Security Lake to support detection, investigation, and analytics.Apply AI assisted techniques to:Reduce WAF false positivesImprove rule tuning and coverageAccelerate threat detection and log analysisDevelop automation and scripts to produce actionable outputs from the API Ownership Framework, improving visibility and accountability.Evaluate and enhance application security posture management (ASPM) and API ownership across cloudnative applications.Define and implement No name remediation requirements, ensuring API posture findings are prioritized, actionable, and consumable by engineering teams.Support day to day operations of cloud and application security tooling, including troubleshooting, optimization, and routine automation.Partner directly with application and platform engineers to integrate WAF, API, and application security controls into CI/CD pipelines.Required Skills & Experience:Strong hands-on experience with AWS WAF operations and tuningPractical experience with policy-as-code and GitHub based CI/CD pipelinesExperience integrating security logs and findings into AWS Security Lake or similar platformsHands-on experience with API security platforms (e.g., Noname or equivalent)Strong automation skills using Terraform and PythonExperience with application security posture management and cloudnative architectures (containers, serverless, microservices)Ability to translate security findings into clear, actionable remediation guidanceExperience & Education:Bachelor’s degree in Computer Science or related field (or equivalent experience) is preferred but not requred8+ years of hands-on security engineering experience, primarily in cloud, application, or API security · AWS Security Specialty, GIAC Cloud Security Automation (GCSA) and/or CCSP preferred","company":"Cigna","rawCompany":"cigna group","city":"Bloomfield","state":"MO","isRemote":false,"isActive":false,"createdAt":"2026-04-12T18:55:45.195Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Sr. Cloud Security Engineer","description":"Location/Schedule:Bloomfield, CT onsite minimum of 3 days per week, 9:00 AM - 5:30 PM M-F with occasional off-hoursRole Summary:This role is a hands-on cloud and application security engineering position focused on modernizing and operating AWS WAF, API security, and application security posture at scale. The work emphasizes automation, policy-as-code, AI assisted analysis, and operational execution, with minimal emphasis on leadership or executive engagement. The contractor will design, build, tune, and operate AWS WAF and API security capabilities, migrate WAF policy management to GitHub based CI/CD, enhance visibility through AWS Security Lake, and automate remediation workflows to reduce manual effort and improve detection fidelity.Primary Responsibilities:Implement, operate, and tune AWS WAF, Firewall Manager, Shield Advanced, and related AWS security services.Migrate and maintain AWS WAF policies as code using GitHub SaaS, including CI/CD workflows, versioning, testing, and rollback.Build automation (Terraform, Python) to deploy, manage, and validate WAF and application security controls at scale.Integrate WAF, API, and application security telemetry into AWS Security Lake to support detection, investigation, and analytics.Apply AI assisted techniques to:Reduce WAF false positivesImprove rule tuning and coverageAccelerate threat detection and log analysisDevelop automation and scripts to produce actionable outputs from the API Ownership Framework, improving visibility and accountability.Evaluate and enhance application security posture management (ASPM) and API ownership across cloudnative applications.Define and implement No name remediation requirements, ensuring API posture findings are prioritized, actionable, and consumable by engineering teams.Support day to day operations of cloud and application security tooling, including troubleshooting, optimization, and routine automation.Partner directly with application and platform engineers to integrate WAF, API, and application security controls into CI/CD pipelines.Required Skills & Experience:Strong hands-on experience with AWS WAF operations and tuningPractical experience with policy-as-code and GitHub based CI/CD pipelinesExperience integrating security logs and findings into AWS Security Lake or similar platformsHands-on experience with API security platforms (e.g., Noname or equivalent)Strong automation skills using Terraform and PythonExperience with application security posture management and cloudnative architectures (containers, serverless, microservices)Ability to translate security findings into clear, actionable remediation guidanceExperience & Education:Bachelor’s degree in Computer Science or related field (or equivalent experience) is preferred but not requred8+ years of hands-on security engineering experience, primarily in cloud, application, or API security · AWS Security Specialty, GIAC Cloud Security Automation (GCSA) and/or CCSP preferred","datePosted":"2026-04-12T18:55:45.195Z","dateModified":"2026-04-12T18:55:45.195Z","hiringOrganization":{"@type":"Organization","name":"Cigna","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Bloomfield","addressRegion":"MO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"21c37a657340988b257d51f6"},"url":"https://jobsearcher.com/jobs/21c37a657340988b257d51f6"}}