Principal Threat Research & App Security Engineer

Koitecc Solutions; Tallahassee (FL); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Bonus eligibility

Equity awards

Comprehensive benefits package

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology, embed security into development pipelines, and lead security across the software lifecycle. You will drive policy, architecture reviews, and risk mitigation across multi-cloud and on-prem environments.

You will mentor engineers, lead vulnerability analyses, and influence security strategy with senior leadership, while advancing secure practices across the enterprise to protect data

Qualifications

• 10+ years of experience in developing and deploying security technologies.
• 7+ years of experience with general-purpose programming languages (Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell).
• 5+ years of Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years of Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years of implementing and managing data protection measures and compliance with regulations.
• 5+ years of Web Application Firewall (WAF) experience.
• 3+ years of leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Develop and enforce data security policies and standards.
• Drive security awareness across the organization.
• Lead the development and enforcement of comprehensive security policies and standards across the SDLC.

Skills

Security engineering

Threat research

Cloud security

Security governance

Incident response

Project management

Mentorship

Security-awareness

Education

Bachelor's degree or equivalent

Tools

Docker

Kubernetes

Snowflake

Infrastructure-as-Code

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology, embed security into development pipelines, and lead security across the software lifecycle. You will drive policy, architecture reviews, and risk mitigation across multi-cloud and on-prem environments.

You will mentor engineers, lead vulnerability analyses, and influence security strategy with senior leadership, while advancing secure practices across the enterprise to protect data