Lead, Application Security & Threat Research

Partners in Digital Health; Frankfort (KY); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Retirement savings options

Wellness programs

Paid time off

Job summary

CVS Health seeks a Principal Application Security Engineer - Threat Research to secure healthcare technology by embedding security into the software lifecycle and pipelines, across multi-cloud and on-prem environments.

You will drive policy development, lead vulnerability management, mentor engineers, and guide strategic security initiatives, ensuring resilience and data protection at scale.

Qualifications

• 10+ years of developing and deploying security technologies.
• 5+ years of experience with cloud (AWS/Azure/GCP) and network security.
• 5+ years of experience with Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years of experience with data protection and regulatory compliance (GDPR, CCPA).
• 5+ years of experience designing and managing Web Application Firewall (WAF) and Layer 7 security solutions.

Responsibilities

• Develop and enforce security policies and standards across engineering.
• Drive security awareness and collaborate with engineering and business teams.
• Lead security testing, vulnerability analysis, and documentation.
• Lead strategic deployment of security solutions to strengthen defense against threats.

Skills

Security architecture

Threat research

Leadership

Mentorship

Communication

Education

Bachelor's degree or equivalent in CS/Engineering

Tools

AWS

Kubernetes

Docker

Terraform

CI/CD

Job description

CVS Health seeks a Principal Application Security Engineer - Threat Research to secure healthcare technology by embedding security into the software lifecycle and pipelines, across multi-cloud and on-prem environments.

You will drive policy development, lead vulnerability management, mentor engineers, and guide strategic security initiatives, ensuring resilience and data protection at scale.