Principal Threat Research Engineer - Application Security

Koitecc Solutions; Olympia (WA); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Bonus eligibility

Comprehensive benefits

Equity program

Retirement plan

Paid time off

Job summary

CVS Health in the United States invites a Principal Application Security Engineer - Threat Research to secure healthcare technology, embed security into development pipelines, and protect sensitive data at scale.

Lead security policy development, risk assessments, and mentorship; collaborate with engineering and business teams; research next‑gen security tools to strengthen our enterprise defense and resilience.

Qualifications

• 10+ years of experience developing and deploying security technologies.
• 7+ years with one or more general-purpose programming languages such as Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell.
• 5+ years in Public Cloud (AWS/Azure/GCP) & Security.
• 5+ years using Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years implementing data protection measures and regulatory compliance (GDPR, CCPA).
• 5+ years designing and managing Web Application Firewall (WAF) and Layer 7 security solutions.
• 5+ years performing vulnerability analysis and risk prioritization with actionable remediation guidance.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce security policies and standards across the organization.
• Drive security awareness and integrate advanced security practices into the SDLC.
• Collaborate with Engineering and Business teams to foster secure engineering practices.
• Lead evaluation and deployment of security solutions across multi-cloud, on-premises, and colocation environments.
• Participate in on-call duties to support 24/7 infrastructure across regions.
• Mentor junior engineers and run training sessions to elevate security skills.
• Research next-generation security tools and contribute to security communities.

Skills

Security engineering

Programming languages Java, C/C++, C#,

Python

Public Cloud security

Docker Kubernetes

Infra as Code

WAF & data protection

Vulnerability analysis

Leadership & mentorship

Education

Bachelor's degree or equivalent experience

Tools

Docker

Kubernetes

Snowflake

Security-as-Code

Infrastructure-as-Code

Job description

CVS Health in the United States invites a Principal Application Security Engineer - Threat Research to secure healthcare technology, embed security into development pipelines, and protect sensitive data at scale.

Lead security policy development, risk assessments, and mentorship; collaborate with engineering and business teams; research next‑gen security tools to strengthen our enterprise defense and resilience.