Lead Application Security Threat Research Engineer

Partners in Digital Health; Lansing (MI); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Comprehensive benefits package

Bonus program and equity awards

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology at scale. You will design and implement security across development pipelines, leveraging automation to protect applications and data in multi-cloud and on-prem environments.

You will mentor engineers, lead security testing and risk assessments, and define a security roadmap aligned with business goals, while guiding incident response and strategic security initiatives.

Qualifications

• 10+ years of experience developing and deploying security technologies.
• 7+ years with one or more general-purpose programming languages (e.g., Java, C/C++, C#, Python, JavaScript, Shell, PowerShell).
• 5+ years of experience with public cloud (AWS/Azure/GCP) and network security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years implementing data protection measures and compliance with GDPR/CCPA.
• 5+ years designing and managing Web Application Firewall (WAF) and Layer 7 security solutions.
• 5+ years performing vulnerability analysis and risk prioritization.
• 3+ years leading security initiatives end-to-end.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Develop and enforce data security policies and standards.
• Drive security awareness across the organization.
• Lead security policy development and integration across the software development lifecycle.

Skills

Threat modelling

Security engineering

Cloud security

Security scripting

Container security

Web application security

Vulnerability management

Leadership

Mentorship

Executive communication

Education

Bachelor's degree or equivalent experience

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology at scale. You will design and implement security across development pipelines, leveraging automation to protect applications and data in multi-cloud and on-prem environments.

You will mentor engineers, lead security testing and risk assessments, and define a security roadmap aligned with business goals, while guiding incident response and strategic security initiatives.