Application Security Engineer: Threat Research Lead

Stryker Corporation; New York (NY); On-site; Confidential; Full time

Benefits offered by this job

Comprehensive benefits

Bonus eligibility

Equity award program

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology and strengthen defenses across cloud and enterprise environments.

You will embed security throughout the software development lifecycle, perform threat modeling, vulnerability analysis, and lead security automation initiatives while mentoring engineers and collaborating with cross-functional teams to improve overall security posture.

Qualifications

• 7+ years in application security or related fields.
• 5+ years with one or more programming languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years of IaC or SecDevOps practices.

Responsibilities

• Secure software development lifecycle across cloud and enterprise environments.
• Conduct threat modeling and vulnerability analysis; recommend remediation.
• Collaborate with engineering teams to embed security into design, development, testing, and deployment.
• Research emerging threats and build scalable security controls and detection capabilities.
• Mentor engineers and share knowledge to improve security practices.
• Participate in incident response and operational security efforts.

Skills

Programming languages

Cloud security

Threat research

Security automation

Secure SDLC

Education

Bachelor's degree

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology and strengthen defenses across cloud and enterprise environments.

You will embed security throughout the software development lifecycle, perform threat modeling, vulnerability analysis, and lead security automation initiatives while mentoring engineers and collaborating with cross-functional teams to improve overall security posture.