Senior App Security Engineer: Threat Research

Koitecc Solutions; Indianapolis (IN); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus eligibility

Career development

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will partner with engineering teams to embed security into design, development, testing, and deployment processes.

The role emphasizes threat research, secure development, incident response, and mentorship, with a focus on protecting sensitive healthcare data and building scalable security architectures.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages (e.g., Java, Python, JavaScript, C#, C/C++, PowerShell, Shell).
• 3+ years of experience securing public cloud environments (AWS/Azure/GCP).
• 3+ years of experience with container technologies (Docker, Kubernetes).
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: Implement and support security standards and best practices; integrate security into design, development, testing, and deployment; promote secure coding and remediation of findings; contribute to security automation.
• Threat Research & Analysis: Research threats, perform assessments, threat modeling and vulnerability analysis; provide actionable risk recommendations; leverage threat intelligence.
• Security Solutions & Architecture: Design and manage security controls across cloud and on‑prem environments; support vulnerability management; build scalable security architectures.
• Collaboration & Communication: Work with engineers, architects, and security stakeholders; participate in design reviews; communicate findings to technical and non‑technical audiences.
• Incident Response & Operational Support: Participate in investigations and incident response; support security operations; identify root causes and remediation.
• Mentorship & Knowledge Sharing: Mentor engineers, deliver trainings, and foster security awareness and learning.
• Innovation & Continuous Improvement: Evaluate new tools, contribute to security research and PoCs, and improve security processes.

Skills

Application security

Threat research

Secure SDLC

Threat modeling

Cloud security

Docker/Kubernetes

Security automation

Education

Bachelor's degree

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will partner with engineering teams to embed security into design, development, testing, and deployment processes.

The role emphasizes threat research, secure development, incident response, and mentorship, with a focus on protecting sensitive healthcare data and building scalable security architectures.