Senior App Security Engineer – Threat Research

Partners in Digital Health; Lincoln (NE); Sur place; USD 107 000 - 284 000; Plein temps

Résumé du poste

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance security across healthcare software. You will partner with engineering teams to embed security into design, development, testing, and deployment, while conducting threat research and building scalable security solutions.

You will mentor engineers, contribute to security automation, and influence practices across cloud and enterprise environments to protect applications and data in a fast-paced healthcare

Qualifications

• 7+ years in application security, info security, software engineering, or related roles.
• 5+ years with programming/scripting languages (Java, Python, JS, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud (AWS, Azure, or GCP).
• 3+ years with container tech (Docker, Kubernetes).
• 3+ years with IaC or Security as Code practices.
• 3+ years doing app security assessments, threat modeling, vulnerability analysis.

Responsabilités

• Security Engineering: implement/apply security standards and best practices.
• Threat Research: analyze threats, perform threat modeling and vulnerability analysis.
• Security Solutions: design and manage security controls across cloud/enterprise environments.
• Collaboration: work with engineers, architects, and security stakeholders.
• Incident Response: participate in security investigations and incident response.
• Mentorship: mentor engineers and share knowledge.
• Innovation: evaluate new security tools and contribute to PoCs.

Connaissances

Application Security

Threat Research

Cloud Security

Container Technologies

Infrastructure as Code

Threat Modeling

Secure SDLC

Formation

Bachelor's degree in CS/IS or related

Outils

Docker

Kubernetes

CI/CD Pipelines

Description du poste

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance security across healthcare software. You will partner with engineering teams to embed security into design, development, testing, and deployment, while conducting threat research and building scalable security solutions.

You will mentor engineers, contribute to security automation, and influence practices across cloud and enterprise environments to protect applications and data in a fast-paced healthcare