Lead Application Security Engineer, Threat Research

Hispanic Alliance for Career Enhancement; Saint Paul (MN); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology. You will blend application security engineering, threat research, and secure development practices, partnering with engineering teams to mitigate risks and strengthen defenses across cloud and on-premises environments.

You will drive security throughout the SDLC, perform assessments, research threats, and build scalable security solutions that protect applications and healthcare

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years of experience securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years of experience with container technologies including Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: Implement and support application security standards, policies, and best practices.
• Threat Research & Analysis: Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Security Solutions & Architecture: Design, configure, and support security technologies across cloud and enterprise environments.
• Collaboration & Communication: Work closely with software engineers, architects, platform teams, and security stakeholders.
• Incident Response & Operational Support: Participate in security investigations and incident response activities as needed.
• Mentorship & Knowledge Sharing: Serve as a technical mentor and share knowledge through training and documentation.
• Innovation & Continuous Improvement: Evaluate emerging security tools and contribute to security research initiatives.

Skills

Application security

Programming languages

Cloud security

Container technologies

Infrastructure as Code

Threat modeling

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology. You will blend application security engineering, threat research, and secure development practices, partnering with engineering teams to mitigate risks and strengthen defenses across cloud and on-premises environments.

You will drive security throughout the SDLC, perform assessments, research threats, and build scalable security solutions that protect applications and healthcare