Principal Offensive Security Engineer & Tooling Leader

CVS Health Corporation; United States; Remote; USD 144,000 - 288,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus program

Equity and incentives

Job summary

CVS Health Corporation is seeking a Principal Engineer to lead the offensive operations program, shaping tooling ecosystems and driving advanced adversarial engagements. This hands-on role combines engineering leadership with direct participation in red and purple team activities across enterprise and cloud environments.

The successful leader will mentor teams, promote standardized tooling practices, and collaborate with security, engineering, and threat intelligence to translate findings into

Qualifications

• At least 10 years in information security and cybersecurity.
• 7+ years in offensive operations and tactics.
• 5+ years building or using offensive tooling in real environments.
• 3+ years leading complex technical engagements.
• 3+ years programming in Python, C/C++, C#, PowerShell or Golang.
• 3+ years in technical writing and post-engagement debriefs.

Responsibilities

• Lead development and evolution of offensive tooling and capabilities.
• Promote best practices for tooling design, automation, and standards.
• Lead or support adversary emulation and red/purple team engagements.
• Design advanced testing scenarios across enterprise and cloud environments.
• Mentor offensive operators and engineers; share knowledge and tradecraft.
• Collaborate with security, engineering and threat intelligence to translate findings into defensive improvements.

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking a Principal Engineer to lead the offensive operations program, shaping tooling ecosystems and driving advanced adversarial engagements. This hands-on role combines engineering leadership with direct participation in red and purple team activities across enterprise and cloud environments.

The successful leader will mentor teams, promote standardized tooling practices, and collaborate with security, engineering, and threat intelligence to translate findings into