Senior Application Security Engineer - Blue Team

9025 CVS Shared Services Resources LLC; California (MO); Hybrid; USD 130,000 - 261,000; Full time

Benefits offered by this job

Comprehensive benefits

Performance bonus

Job summary

CVS Health is seeking a Staff Application Security Engineer—Blue Team to design and reinforce defenses across applications, cloud platforms, data systems, and networks. You will integrate secure-by-design practices into SDLC, lead architecture reviews, and mentor teams in secure coding and resilience.

The role requires deep expertise in application, cloud, and data security, with hands-on capability in incident response, threat modeling, and security automation across multi-cloud and hybrid

Qualifications

• Minimum 7+ years in security engineering or related fields.
• Strong expertise in application and cloud security with defensive operations.
• Experience guiding secure development and incident response programs.
• Bachelor’s degree or equivalent work experience required.

Responsibilities

• Design, implement, and enforce defensive security controls across apps and cloud.
• Lead security architecture reviews and drive secure development practices.
• Monitor, detect, respond to security events, and coordinate incident response.
• Mentor engineers and promote secure coding and resilience practices.

Skills

Security engineering

Application security

Cloud security

Defensive security

Security automation

Incident response

Mentorship

Leadership

Education

Bachelor's degree

Tools

Docker

Kubernetes

Infrastructure as Code

Security as Code

CI/CD

Job description

CVS Health is seeking a Staff Application Security Engineer—Blue Team to design and reinforce defenses across applications, cloud platforms, data systems, and networks. You will integrate secure-by-design practices into SDLC, lead architecture reviews, and mentor teams in secure coding and resilience.

The role requires deep expertise in application, cloud, and data security, with hands-on capability in incident response, threat modeling, and security automation across multi-cloud and hybrid