Principal Threat Research Engineer, Application Security

Partners in Digital Health; Little Rock (AR); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology and data at scale. You will embed security into development pipelines, drive security policy, and mentor engineering teams across a multi-cloud environment.

The role emphasizes threat research, security automation, and cross-functional leadership to ensure resilience and scalable security practices across the enterprise.

Qualifications

• 10+ years of experience developing and deploying security technologies.
• 7+ years with Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell.
• 5+ years with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years implementing data protection measures and compliance (GDPR, CCPA).
• 5+ years designing and managing Web Application Firewall (WAF) & Layer7 security.
• 5+ years performing vulnerability analysis and risk prioritization.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce security policies and standards.
• Drive security awareness across the organization.
• Lead the integration of secure engineering practices across the SDLC.
• Collaborate with Engineering and Business teams on secure practices.
• Analyze and configure security solutions across multi-cloud, on-premises, and colocation environments.
• Lead security testing, vulnerability analysis, and documentation.
• Lead incident response and 24/7 operational support across regions.
• Mentor junior engineers and foster continuous security learning.
• Contribute to security research and adoption of new tools and practices.
• Plan security roadmap, risk assessments, and budget for security initiatives.

Skills

Security engineering

Programming languages

Public Cloud & Network Security

Docker/Kubernetes/Infrastructure-as-

Data protection & compliance

WAF & Layer7 security

Vulnerability analysis & risk priorit

Security initiatives leadership

Architecting cloud solutions

Networking & SDN

Diagrams: Network/Dataflow

Remote/virtual team collaboration

Compliance frameworks knowledge

Data warehouses & big data security (e

Cyber resilience standards & programs

Open-source security contributions

Education

Bachelor's degree or equivalent experience

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology and data at scale. You will embed security into development pipelines, drive security policy, and mentor engineering teams across a multi-cloud environment.

The role emphasizes threat research, security automation, and cross-functional leadership to ensure resilience and scalable security practices across the enterprise.