Senior App Security Engineer: Threat Research

Partners in Digital Health; Madison (WI); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will lead security assessments, threat modeling, and secure development practices while partnering with engineering teams to embed protections throughout the lifecycle.

You will mentor engineers, drive security automation, and help strengthen the overall security posture with a focus on scalable, resilient architectures and data protection in

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years programming or scripting in Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell.
• 3+ years in public cloud environments (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code.
• 3+ years performing app security assessments and threat modeling.

Responsibilities

• Implement security standards and best practices.
• Integrate security into design, development, testing, and deployment.
• Promote secure coding and remediate findings.
• Contribute to security automation initiatives.
• Research emerging threats and perform threat modeling and vulnerability analysis.
• Design and support security controls across cloud and enterprise environments.
• Mentor engineers and share knowledge.

Skills

AppSec experience

Languages: Java/Python/JS/C#

Cloud: AWS/Azure/GCP

Docker/Kubernetes

IaC / Security as Code

Threat modeling

Education

Bachelor's degree

Tools

Terraform

CI/CD tooling

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will lead security assessments, threat modeling, and secure development practices while partnering with engineering teams to embed protections throughout the lifecycle.

You will mentor engineers, drive security automation, and help strengthen the overall security posture with a focus on scalable, resilient architectures and data protection in