Lead Threat Research & Application Security

Partners in Digital Health; Olympia (WA); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Bonus eligibility

Equity award program

Comprehensive benefits

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare software and data across cloud and on-prem environments. You will embed security into development lifecycles, drive policy, and mentor engineers while shaping enterprise security strategy.

Responsibilities include policy development, incident response leadership, and overseeing vulnerability programs across regional infrastructures.

Qualifications

• 10+ years of experience in developing and deploying security technologies.
• 7+ years of experience with one or more general-purpose programming/script languages (Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell).
• 5+ years of experience with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years of experience with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years of experience with data protection measures and compliance (GDPR, CCPA).
• 5+ years of experience designing, implementing, and managing Web Application Firewall (WAF) and Layer 7 security solutions.
• 5+ years of vulnerability analysis and risk prioritization with remediation guidance.
• 3+ years of experience leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Lead security testing, vulnerability analysis, and documentation.
• Drive security awareness across the organization.
• Collaborate with Engineering and Business teams to develop secure engineering practices.
• Lead by example in incident response and resilience planning.
• Mentor junior engineers and advance security training across teams.
• Strategically plan the security roadmap, budgets, and governance.

Skills

Security engineering

Cloud security

Threat research

DevSecOps

WAF

Vulnerability analysis

Leadership

Compliance awareness

Networking

Open-source

Education

Bachelor's degree or equivalent

Tools

Docker

Kubernetes

Terraform

IaC tooling

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare software and data across cloud and on-prem environments. You will embed security into development lifecycles, drive policy, and mentor engineers while shaping enterprise security strategy.

Responsibilities include policy development, incident response leadership, and overseeing vulnerability programs across regional infrastructures.