Lead Application Security Engineer - Threat Research

Hispanic Alliance for Career Enhancement; Austin (TX); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision coverage

Job summary

CVS Health is looking for a Staff Application Security Engineer - Threat Research to strengthen our healthcare technology security across cloud and enterprise platforms. You will partner with engineering teams to embed security into design, development, and deployment while leading threat research and remediation efforts.

You will mentor engineers, drive secure coding practices, and contribute to scalable security architectures with a focus on data protection and incident response.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with one or more programming languages (Java/Python/JS/C#/C/C++/PowerShell).
• 3+ years securing cloud environments (AWS/Azure/GCP).
• 3+ years container tech (Docker/Kubernetes).
• 3+ years IaC/Sec as Code and threat modeling.

Responsibilities

• Design and implement secure development practices across teams.
• Conduct threat research, threat modeling, and vulnerability analysis.
• Integrate security controls into cloud and on-prem environments.
• Mentor engineers and share security knowledge through sessions.
• Lead security investigations and incident response support.
• Evaluate and adopt security tooling for automation and scalability.

Skills

Application security

Threat research

Secure development lifecycle

Cloud security

Communication skills

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

Job description

CVS Health is looking for a Staff Application Security Engineer - Threat Research to strengthen our healthcare technology security across cloud and enterprise platforms. You will partner with engineering teams to embed security into design, development, and deployment while leading threat research and remediation efforts.

You will mentor engineers, drive secure coding practices, and contribute to scalable security architectures with a focus on data protection and incident response.