Principal Threat Research Engineer - App Security

Relha LLC; New York, Northern (NY, KY); Hybrid; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical insurance

Dental coverage

Vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Principal Application Security Engineer – Threat Research to secure healthcare software and data at scale. You will drive secure SDLC practices, lead threat research, and mentor engineers across multi-cloud environments.

The role emphasizes policy development, security automation, and cutting-edge defenses. The position requires deep engineering experience, strategic security planning, and strong collaboration with engineering and business teams to align security with

Qualifications

• 10+ years in security technologies development and deployment.
• 5+ years in Public Cloud (AWS/Azure/GCP) and network security.
• 5+ years with Docker, Kubernetes, Security-as-Code and IaC.
• 5+ years implementing data protection measures and compliance (GDPR/CCPA).
• 5+ years designing and managing Web Application Firewall (WAF) and Layer 7 security.
• 5+ years vulnerability analysis with actionable remediation guidance.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Develop and enforce data security policies and standards.
• Drive security awareness across the organization.
• Lead the integration of secure engineering practices across SDLC with senior management liaison.
• Analyze, develop, and configure security solutions across multi-cloud, on-prem, and colocation.
• Lead security testing, vulnerability analysis, and documentation.
• Participate in on-call duties for a 24/7 infrastructure.
• Mentor junior engineers and organize regular security training.
• Engage in security research and adoption of next-gen tools and practices.
• Participate in strategic security roadmap planning and budgeting.

Skills

Security Architecture

Cloud Security

DevSecOps

Container Security

WAF & App Security

Vulnerability Mgmt

Threat Research

Security Automation

Education

Bachelor’s degree or equivalent in CS or related field

Tools

Docker

Kubernetes

Security-as-Code

Infrastructure-as-Code

Job description

CVS Health is seeking a Principal Application Security Engineer – Threat Research to secure healthcare software and data at scale. You will drive secure SDLC practices, lead threat research, and mentor engineers across multi-cloud environments.

The role emphasizes policy development, security automation, and cutting-edge defenses. The position requires deep engineering experience, strategic security planning, and strong collaboration with engineering and business teams to align security with