Senior App Security & Threat Research Engineer

Partners in Digital Health; Jackson (MS); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology, embedding security into development pipelines and guiding the full software lifecycle.

You will lead threat research, policy development, and security testing across multi-cloud, on‑premises, and colocation environments, mentoring engineers and partnering with senior leaders to align security with business objectives and patient trust.

Qualifications

• 10+ years creating and deploying security technologies.
• 7+ years programming with Java, C/C++, C#, Python, JavaScript, Shell, PowerShell.
• 5+ years in Public Cloud (AWS/Azure/GCP) and network security.
• 5+ years with Docker, Kubernetes, Security-as-Code, IaC.
• 5+ years implementing data protection measures and regulatory compliance (GDPR, CCPA).
• 5+ years designing and managing Web Application Firewalls (WAF) and L7 security.
• 5+ years performing vulnerability analysis and risk prioritization with actionable remediation guidance.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Develop and enforce data security policies and standards.
• Drive security awareness across the organization.
• Lead the development and enforcement of comprehensive security policies and standards across the software development lifecycle.

Skills

Security leadership

Threat research

Policy enforcement

Mentorship

Education

Bachelor's degree or equivalent experience

Tools

Docker

Kubernetes

Security-as-Code

Infrastructure-as-Code

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology, embedding security into development pipelines and guiding the full software lifecycle.

You will lead threat research, policy development, and security testing across multi-cloud, on‑premises, and colocation environments, mentoring engineers and partnering with senior leaders to align security with business objectives and patient trust.