Senior Application Security Engineer: Threat Research

Partners in Digital Health; Boise (ID); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental & vision

Paid time off

Wellness programs

Retirement options

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will drive secure development, perform threat modeling, and mentor teams while shaping resilient application defenses.

In this role, you will partner with engineers and security stakeholders to embed security into design, conduct assessments, analyze threats, and implement scalable controls that protect applications and sensitive health data.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with programming/scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, Shell).
• 3+ years in cloud environments (AWS/Azure/GCP) and container tech (Docker/Kubernetes).

Responsibilities

• Implement and promote secure development practices across teams.
• Conduct threat research, vulnerability analysis, and threat modeling.
• Design and manage security controls across cloud and enterprise environments.
• Lead security reviews and communicate findings to technical and non-technical audiences.
• Mentor engineers and contribute to security training and knowledge sharing.
• Support incident response activities and long-term remediation strategies.
• Evaluate and adopt new security tools and automation.

Skills

Application security

Threat research

Cloud security

Container security

Security automation

Threat modeling

Secure SDLC

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Docker

Kubernetes

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will drive secure development, perform threat modeling, and mentor teams while shaping resilient application defenses.

In this role, you will partner with engineers and security stakeholders to embed security into design, conduct assessments, analyze threats, and implement scalable controls that protect applications and sensitive health data.