Senior App Security Engineer: Threat Research & Defense

CVS Health; Frankfort (KY); Vor Ort; USD 107.000 - 284.000; Vollzeit

Zusammenfassung

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will combine application security engineering, threat research, and secure development practices to mitigate risks and strengthen defenses.

You will partner with engineering teams, conduct security assessments, model threats, and mentor engineers while advancing scalable security solutions and adherence to regulatory requirements in a

Qualifikationen

• 7+ years in application or information security or related roles.
• 5+ years in programming or scripting (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing cloud environments (AWS/Azure/GCP) and using container tech.
• 3+ years with IaC or Security as Code, and threat modeling.

Aufgaben

• Implement and enforce application security standards and best practices.
• Collaborate with engineering to integrate security in design, dev, test, and deployment.
• Lead threat research, assessments, modeling, and vulnerability analyses.
• Design and manage security controls across cloud and on-prem environments.
• Mentor engineers and promote secure coding and remediation.
• Contribute to security automation and incident response readiness.

Kenntnisse

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

AWS

Azure

Kubernetes

Docker

IaC/SecOps

Ausbildung

Bachelor's degree

Tools

Docker

Kubernetes

Jobbeschreibung

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will combine application security engineering, threat research, and secure development practices to mitigate risks and strengthen defenses.

You will partner with engineering teams, conduct security assessments, model threats, and mentor engineers while advancing scalable security solutions and adherence to regulatory requirements in a