Senior App Security Engineer – Threat Research

Partners in Digital Health; City of Albany (NY); Presencial; USD 107.000 - 284.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Comprehensive benefits package

Bonus program

Equity award program

Career development opportunities

Descripción de la vacante

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will drive security into design, development, testing, and deployment, and mentor teams in secure practices.

This role emphasizes threat research, scalable security solutions, and collaboration with multiple engineering groups. The position requires substantial experience in application security, cloud security, and threat modeling, with a

Formación

• 7+ years in application security or related roles.
• 5+ years in programming or scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell).
• 3+ years securing cloud environments (AWS, Azure, GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years IaC or Security as Code practices.
• 3+ years conducting security assessments and threat modeling.

Responsabilidades

• Security engineering and secure development across cloud and on‑prem environments.
• Research threats, perform assessments, model threats, and provide actionable guidance.
• Design and manage security controls for applications, APIs, data, and platforms.
• Collaborate with engineering and product teams; communicate findings clearly.

Conocimientos

Application Security

Threat Modeling

Cloud Security

Docker & Kubernetes

Infrastructure as Code

Security Assessments

Educación

Bachelor's degree

Herramientas

AWS

Azure

GCP

WAF / API security

Descripción del empleo

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will drive security into design, development, testing, and deployment, and mentor teams in secure practices.

This role emphasizes threat research, scalable security solutions, and collaboration with multiple engineering groups. The position requires substantial experience in application security, cloud security, and threat modeling, with a