Principal Threat Research Engineer - App Security

Koitecc Solutions; Concord (NH); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Bonus eligibility

Medical/dental/vision coverage

Equity awards

On-site amenities and benefits

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology across development pipelines and complex environments. You will lead policy development, threat analysis, and secure engineering practices while mentoring engineers and driving security research initiatives.

Responsibilities include implementing security across multi-cloud and on-prem environments, leading incident response, and collaborating with executive leadership to align

Qualifications

• 10+ years of experience in developing and deploying security technologies.
• 7+ years of experience with one or more general-purpose programming languages (e.g., Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell).
• 5+ years of public cloud (AWS/Azure/GCP) & network security.
• 5+ years of Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years of implementing data protection measures and compliance (GDPR, CCPA).
• 5+ years of Web Application Firewall (WAF) and Layer 7 security solutions.
• 5+ years of vulnerability analysis and risk prioritization with remediation guidance.
• 3+ years of leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce security policies and standards across engineering.
• Drive security awareness throughout the organization.
• Collaborate with Engineering and Business teams to embed secure practices.
• Analyze and configure security solutions across multi-cloud, on-prem, and colocation environments.
• Lead security testing, vulnerability analysis, and documentation.
• Participate in 24/7 on-call support across regions and environments.
• Mentor junior engineers and lead security training programs.
• Engage in security research and adoption of next-generation tools.
• Contribute to security roadmaps, risk assessments, and budgets.

Education

Bachelor's degree or equivalent

Tools

Docker

Kubernetes

Security as Code

Infrastructure as Code

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology across development pipelines and complex environments. You will lead policy development, threat analysis, and secure engineering practices while mentoring engineers and driving security research initiatives.

Responsibilities include implementing security across multi-cloud and on-prem environments, leading incident response, and collaborating with executive leadership to align