Senior App Security Engineer – Threat Research

Idaho Society of Professional Engineers; Boise (ID); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligibility

Equity target

Comprehensive benefits

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and enterprise environments. You will partner with engineering teams to embed security into design, development, and deployment, and drive threat research and remediation initiatives.

This role emphasizes secure SDLC, risk-based decision making, mentorship, and building scalable security solutions while protecting patient data and supporting the organization’s

Qualifications

• 7+ years in application security or related roles.
• 5+ years programming in Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell.
• 3+ years securing public cloud (AWS/Azure/GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years IaC or Security as Code.
• 3+ years performing assessments, vulnerability analysis, threat modeling.

Responsibilities

• Security Engineering & Secure Development: Implement and support security standards, policies, and best practices.
• Threat Research & Analysis: Research threats, perform assessments, evaluate risks, provide actionable recommendations.
• Security Solutions & Architecture: Design and support security technologies across cloud and enterprise environments.
• Collaboration & Communication: Work with engineers and stakeholders, participate in design reviews, communicate findings.
• Incident Response & Operational Support: Participate in investigations, support security operations, identify root causes.
• Mentorship & Knowledge Sharing: Mentor engineers, share knowledge through training and documentation.
• Innovation & Continuous Improvement: Evaluate emerging tools, contribute to research and improvements.

Skills

Application security

Threat research

Secure development

Mentorship

Security automation

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

CI/CD

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and enterprise environments. You will partner with engineering teams to embed security into design, development, and deployment, and drive threat research and remediation initiatives.

This role emphasizes secure SDLC, risk-based decision making, mentorship, and building scalable security solutions while protecting patient data and supporting the organization’s