Senior App Security Engineer - Threat Research & Cloud

Koitecc Solutions; Salem (OR); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by integrating security into the software lifecycle, conducting threat research, and guiding secure development across cloud and enterprise environments. This role emphasizes mentorship, scalable security solutions, and collaboration with multiple teams.

You will lead security engineering efforts, drive secure coding practices, and contribute to incident response while helping to advance

Qualifications

• 7+ years in application security, information security, or related roles.
• 5+ years with programming languages (e.g., Java, Python, JS, C#, C/C++).
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years container technologies (Docker/Kubernetes).
• 3+ years IaC or Security as Code practices.
• 3+ years performing security assessments, threat modeling.

Responsibilities

• Design and implement application security controls and secure development practices.
• Partner with engineering teams to embed security into design, development, testing, and deployment.
• Conduct threat research, vulnerability analysis, and security assessments.
• Support security architecture across cloud and enterprise environments.

Skills

Application security

Threat research

Secure SDLC

Cloud security

Containerization (Docker/Kubernetes)

Infrastructure as Code/Sec

Threat modeling

Security assessments

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by integrating security into the software lifecycle, conducting threat research, and guiding secure development across cloud and enterprise environments. This role emphasizes mentorship, scalable security solutions, and collaboration with multiple teams.

You will lead security engineering efforts, drive secure coding practices, and contribute to incident response while helping to advance