Senior Application Security Engineer - Threat Research

CVS Health; Atlanta (GA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by combining application security engineering, threat research, and secure development practices. You will partner with engineering teams to identify risks, implement controls, and strengthen defenses across cloud and enterprise environments.

You will embed security throughout the software development lifecycle, conduct security assessments, research threats, and build scalable security

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with programming or scripting languages (e.g., Java, Python, JavaScript, C#, C/C++, PowerShell, Shell).
• 3+ years of experience securing public cloud environments (AWS, Azure, or Google Cloud).
• 3+ years of experience with container technologies (Docker and Kubernetes).
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design and development processes.
• Promote secure coding practices and remediate security findings.
• Contribute to security automation initiatives for efficiency and scalability.
• Research emerging threats and perform vulnerability analyses.
• Design and support security controls across cloud and enterprise environments.
• Communicate findings to technical and non-technical audiences.

Skills

Security engineering

Threat research

Secure development

Cloud security

Threat modeling

Education

Bachelor's degree

Tools

Docker

Kubernetes

CI/CD

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by combining application security engineering, threat research, and secure development practices. You will partner with engineering teams to identify risks, implement controls, and strengthen defenses across cloud and enterprise environments.

You will embed security throughout the software development lifecycle, conduct security assessments, research threats, and build scalable security