Senior App Security Engineer — Threat Research & Cloud

Stryker Corporation; Austin (TX); On-site; Confidential; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security in the SDLC, perform assessments, and drive scalable protections while mentoring teams.

Lead threat research, design security architectures, and collaborate with engineers, platform teams, and stakeholders to reduce risk and improve detection capabilities.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years of experience securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years of experience with container technologies including Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Embed security into the software development lifecycle.
• Conduct security assessments, threat modeling, and vulnerability analysis.
• Design, configure, and support security technologies across cloud and enterprise environments.
• Collaborate with engineers, architects, and security stakeholders; communicate findings.
• Participate in incident response and operational security activities.

Skills

Application security

Cloud security

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Threat modeling

Vulnerability analysis

Docker

Kubernetes

Infrastructure as Code

Security as Code

CI/CD security

Education

Bachelor's degree

Tools

Terraform

CI/CD tooling

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security in the SDLC, perform assessments, and drive scalable protections while mentoring teams.

Lead threat research, design security architectures, and collaborate with engineers, platform teams, and stakeholders to reduce risk and improve detection capabilities.