Senior App Security Engineer — Threat Research & DevSecOps

Hispanic Alliance for Career Enhancement; Springfield (IL); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Health benefits

Bonus program

Equity awards

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare apps across cloud and enterprise environments. You’ll blend secure development, threat research, and security engineering to identify risks, implement controls, and mentor teams.

You'll conduct assessments, model threats, and design scalable security architectures, collaborating with software engineers and platform teams to embed security early in the SDLC.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with programming or scripting languages (Java, Python, JavaScript, C#, C/C++).
• 3+ years of experience securing public cloud environments (AWS, Azure, GCP).

Responsibilities

• Implement and influence secure development practices across cloud and enterprise environments.
• Perform security assessments, threat modeling, and vulnerability analysis.
• Collaborate with engineers and security stakeholders to embed security early in the SDLC.

Skills

Application security

Threat research

Cloud security

Security assessments

DevSecOps

CI/CD security

Docker Kubernetes

Threat modeling

Education

Bachelor's degree

Tools

Docker

Kubernetes

Infrastructure as Code

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare apps across cloud and enterprise environments. You’ll blend secure development, threat research, and security engineering to identify risks, implement controls, and mentor teams.

You'll conduct assessments, model threats, and design scalable security architectures, collaborating with software engineers and platform teams to embed security early in the SDLC.