Lead Threat Research & Application Security Engineer

Koitecc Solutions; Lansing (MI); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision coverage

Bonus program

Equity awards

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology and protect sensitive data at scale. The role blends advanced threat research with secure development, embedding security into pipelines and driving scalable defense across multi-cloud and on-prem environments.

You will mentor engineers, lead incident response, and shape the security roadmap while collaborating with executives to align security with business goals.

Qualifications

• 10+ years of experience in developing and deploying security technologies.
• 7+ years of experience with Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell.
• 5+ years of with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years of experience with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years of experience implementing data protection measures and regulatory compliance.
• 5+ years of experience designing and managing WAF and Layer 7 security solutions.
• 5+ years of vulnerability analysis and risk prioritization with remediation guidance.
• 3+ years of experience leading security initiatives.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Drive security awareness across the organization.
• Lead security policy development across the software development lifecycle.
• Collaborate with Engineering and Business teams to promote secure practices.
• Lead security testing, vulnerability analysis, and documentation.
• Strategically deploy security solutions focusing on scalability and resilience.
• Participate in 24/7 incident response across regions and environments.
• Mentor junior engineers and drive a security mentorship program.
• Contribute to security research and open-source projects.
• Shape security roadmap through risk assessments and budgeting.

Skills

Security engineering

Threat research

Cloud security

Docker & Kubernetes

Security as Code

Data protection & compliance

WAF & AppSec

Vulnerability analysis

Leadership

Architecting cloud

Education

Bachelor's degree or equivalent

Tools

Snowflake

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology and protect sensitive data at scale. The role blends advanced threat research with secure development, embedding security into pipelines and driving scalable defense across multi-cloud and on-prem environments.

You will mentor engineers, lead incident response, and shape the security roadmap while collaborating with executives to align security with business goals.