Principal AppSec Threat Research Engineer

Koitecc Solutions; Little Rock (AR); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health seeks a Principal Application Security Engineer - Threat Research to secure healthcare software at scale. You will design and embed security across development pipelines, lead threat research, and mentor engineers to raise security standards.

You’ll analyze multi-cloud environments, drive incident response, and help shape the security roadmap with executives. This full-time role offers advanced benefits and the chance to influence security practices across the enterprise.

Qualifications

• 10+ years in developing and deploying security technologies.
• 5+ years with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years implementing and managing data protection measures and compliance with data protection regulations (GDPR, CCPA).

Responsibilities

• Develop and enforce engineering security policies and standards.
• Lead security testing, vulnerability analysis, and documentation.
• Collaborate with Engineering and Business teams to develop secure engineering practices.
• Lead the integration of secure engineering practices across the organization while liaising with senior management.

Skills

Java

C/C++

Python

Cloud security

DevSecOps

WAF

Vulnerability analysis

Leadership

Incident response

Security in SDLC

Automation

Education

Bachelor's degree or equivalent

Tools

Docker

Kubernetes

Infrastructure-as-Code

Security-as-Code

Snowflake

Job description

CVS Health seeks a Principal Application Security Engineer - Threat Research to secure healthcare software at scale. You will design and embed security across development pipelines, lead threat research, and mentor engineers to raise security standards.

You’ll analyze multi-cloud environments, drive incident response, and help shape the security roadmap with executives. This full-time role offers advanced benefits and the chance to influence security practices across the enterprise.