Principal Threat Research & Application Security Engineer

Partners in Digital Health; Madison (WI); Hybrid; USD 144,000 - 288,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus program

Job summary

CVS Health is seeking a Principal Application Security Engineer – Threat Research to secure healthcare tech at scale. You will embed security into development lifecycles, drive policy, and mentor teams while advancing security research and innovative defenses.

You will lead cross‑functional collaboration, oversee vulnerability management, and shape the security roadmap across multi‑cloud and on‑prem environments. A senior engineer with hands‑on expertise is required.

Qualifications

• 10+ years of experience in developing and deploying security technologies.
• 5+ years of with Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years of experience with data protection compliance (GDPR, CCPA).
• 5+ years designing and managing Web Application Firewall (WAF) and Layer 7 security.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Lead security testing, vulnerability analysis, and documentation.
• Coordinate security across multi-cloud, on-prem, and colocation environments.
• Mentor engineers and drive security awareness across the organization.
• Strategize security roadmaps with risk assessments and budget planning.

Skills

Security engineering

Java

C/C++

Python

Cloud security

Docker & Kubernetes

Infrastructure as Code

WAF & AppSec

Vulnerability analysis

Incident response

Education

Bachelor's degree or equivalent experience

Tools

Snowflake

Open-source security tools

Job description

CVS Health is seeking a Principal Application Security Engineer – Threat Research to secure healthcare tech at scale. You will embed security into development lifecycles, drive policy, and mentor teams while advancing security research and innovative defenses.

You will lead cross‑functional collaboration, oversee vulnerability management, and shape the security roadmap across multi‑cloud and on‑prem environments. A senior engineer with hands‑on expertise is required.