Senior Application Security Engineer: Threat Research

Koitecc Solutions; Annapolis (MD); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by combining app security engineering, threat research, and secure development practices across cloud and enterprise environments.

You will partner with engineering teams, conduct risk assessments, build scalable security controls, and mentor colleagues while advancing a culture of security across product teams and operational functions.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with one or more programming languages (Java, Python, JS, C#, C/C++).
• 3+ years securing cloud environments (AWS/Azure/GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years IaC or Security as Code practices.
• 3+ years performing security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and remediate findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Design, configure, and support security technologies across cloud and enterprise environments.
• Mentor engineers and share knowledge through training and documentation.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by combining app security engineering, threat research, and secure development practices across cloud and enterprise environments.

You will partner with engineering teams, conduct risk assessments, build scalable security controls, and mentor colleagues while advancing a culture of security across product teams and operational functions.