Senior App Security Engineer, Threat Research

Partners in Digital Health; Springfield (IL); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to lead security engineering across cloud and enterprise environments. You will embed security into the software development lifecycle, perform assessments, and drive scalable protections for applications and data.

The role emphasizes threat research, secure development practices, and mentorship across multiple teams, with a strong focus on modern healthcare technology and risk reduction.

Qualifications

• 7+ years in application security or related roles
• 5+ years with one or more programming or scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell)
• 3+ years securing public cloud environments (AWS, Azure, or GCP)
• 3+ years with container technologies (Docker, Kubernetes)
• 3+ years with Infrastructure as Code or Security as Code practices
• 3+ years with application security assessments, vulnerability analysis, and threat modeling

Responsibilities

• Security Engineering & Secure Development: implement standards, policies, and best practices
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes
• Promote secure coding practices and remediate findings
• Contribute to security automation initiatives for efficiency and scalability
• Threat Research & Analysis: research threats and trends
• Perform threat modeling and vulnerability analyses
• Evaluate risks and provide actionable recommendations to engineering teams
• Leverage threat intelligence to enhance controls and detection capabilities
• Security Solutions & Architecture: design, configure, and support security technologies across cloud and on‑prem
• Assist with security controls for applications, APIs, and data
• Support vulnerability management and remediation programs
• Contribute to scalable security architectures
• Collaboration & Communication: work with engineers, architects, and security stakeholders
• Participate in design reviews to embed security early
• Communicate findings to technical and non-technical audiences
• Incident Response & Operational Support: participate in investigations and response activities
• Support security functions across environments
• Identify root causes and implement remediation
• Mentorship & Knowledge Sharing: mentor engineers, lead trainings
• Share knowledge through sessions and documentation
• Foster a culture of security awareness
• Innovation & Continuous Improvement: evaluate tools and technologies
• Contribute to security research and PoCs
• Suggest process improvements to strengthen programs

Skills

App security

Programming languages

Cloud security

Containers

Infrastructure as Code

Threat modeling

Education

Bachelor's degree

Tools

Docker

Kubernetes

CI/CD pipelines

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to lead security engineering across cloud and enterprise environments. You will embed security into the software development lifecycle, perform assessments, and drive scalable protections for applications and data.

The role emphasizes threat research, secure development practices, and mentorship across multiple teams, with a strong focus on modern healthcare technology and risk reduction.