• Lead efforts to monitor and maintain security across servers, networks, and endpoints. • Administer and enhance network security defenses to prevent breaches. • Analyze vulnerabilities and implement solutions to strengthen system integrity. • Respond to and investigate cyber incidents, ensuring timely resolution and documentation. • Develop and maintain security policies, standards, and guidelines aligned with best practices. • Collaborate with IT teams to ensure security controls, and compliance and risk management strategies are effective. • Educate staff on cybersecurity awareness and best practices.

Join our team as a Cyber Security Analyst and help safeguard critical systems while driving innovation in security practices. We are looking for a proactive professional who thrives in a collaborative environment and is passionate about protecting data and infrastructure. Responsibilities - Lead efforts to monitor and maintain security across servers, networks, and endpoints. - Administer and enhance network security defenses to prevent breaches. - Analyze vulnerabilities and implement solutions to strengthen system integrity. - Respond to and investigate cyber incidents, ensuring timely resolution and documentation. - Develop and maintain security policies, standards, and guidelines aligned with best practices. - Collaborate with IT teams to ensure security controls, and compliance and risk management strategies are effective. - Educate staff on cybersecurity awareness and best practices. Qualifications Required: - Minimum 5 years of experience in cybersecurity, network engineering, or system analysis. - Strong knowledge of incident response, intrusion detection, and risk management. - Proficiency in analyzing complex systems and security audit results. - Excellent communication and problem-solving skills. Preferred: - Bachelor’s degree in Computer Science or related field. - Certifications such as CISSP, CEH, or CISA. - Experience with Windows Server, Linux, Cisco, and security tools like Wireshark. Since 1981, Allegiance by Cigna Healthcare has specialized in the administration of medical benefits, offering core services such as claims processing, customer service, utilization management, and case management. Backed by a unique high-touch approach to both member and client service, Allegiance supports and administers some of the nation’s most innovative approaches to Health Plan benefits. If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload. For this position, we anticipate offering an hourly rate of 32 - 49 USD / hourly, depending on relevant factors, including experience and geographic location. This role is also anticipated to be eligible to participate in an annual bonus plan. At The Cigna Group, you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer 401(k), company paid life insurance, tuition reimbursement, a minimum of 18 days of paid time off per year and paid holidays. For more details on our employee benefits programs, click here. About Cigna Healthcare Cigna Healthcare, a division of The Cigna Group, is an advocate for better health through every stage of life. We guide our customers through the health care system, empowering them with the information and insight they need to make the best choices for improving their health and vitality. Join us in driving growth and improving lives. Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws. If you need a reasonable accommodation to complete the online application process, please email seeyourself@thecignagroup.com for assistance. Please note that this email inbox is dedicated to accommodation requests only and cannot provide application updates or accept resumes. The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State. Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.

• Participate in and lead incident response, triage, and investigations • Conduct post-incident analysis • Create incident reports and documentation for stakeholders • Design, develop, and maintain high-fidelity security detections • Tune and optimize security detections and alerts • Document detection logic, data dependencies, assumptions, and response guidance • Provide technical guidance and mentorship to junior SOC analysts • Lead purple team efforts • Proactively conduct threat hunting to identify malicious activity • Leverage threat intelligence for detection development and incident response activities

• Monitor security events using Security Information and Event Management (SIEM) systems and endpoint detection/response (EDR) tools. • Perform initial triage of events and events of interest under supervision, escalating potential incidents to senior team members as needed. • Assist in documenting events and maintaining response playbooks for events of interest and potential incidents. • Support proactive threat monitoring by reviewing logs and alerts for suspicious activity. • Participate in foundational purple team exercises, such as observing tabletop simulations or blue/red team collaborations, to understand detection and response gaps. • Assist in collecting and organizing threat intelligence data (e.g., indicators of compromise [IOCs]) from open-source feeds or internal reports. • Conduct basic risk enumeration tasks, such as identifying vulnerabilities using provided scanning tools. • Engage in training to learn threat hunting basics and threat intelligence fundamentals.