Senior Application Security Engineer - Threat Research

Hispanic Alliance for Career Enhancement; Columbus (OH); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement savings options

Paid time off

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software across cloud and on-prem environments. You will partner with engineering teams to embed security into the SDLC, conduct threat research, and build scalable protections for applications and data.

You will lead security assessments, threat modeling, and remediation efforts while mentoring engineers and contributing to a culture of security awareness.

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years in programming: Java, Python, JavaScript, C#, C/C++, PowerShell or Shell.
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years of Docker and Kubernetes experience.
• 3+ years of IaC or Security as Code practices.
• 3+ years of app security assessments and threat modeling.

Responsibilities

• Implement and support security standards and best practices.
• Integrate security into design, development, testing, and deployment.
• Remediate findings and promote secure coding practices.
• Contribute to security automation for efficiency and scale.
• Research threats and perform threat modeling and vulnerability analysis.
• Evaluate risks and provide actionable recommendations.
• Design and support security controls across cloud and enterprise environments.
• Mentor engineers and share knowledge on security practices.
• Lead incident response and operational security activities.

Skills

Application security

Threat research

Secure SDLC

Cloud security

Docker/Kubernetes

IaC/SecOps

Threat modeling

Education

Bachelor's degree

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software across cloud and on-prem environments. You will partner with engineering teams to embed security into the SDLC, conduct threat research, and build scalable protections for applications and data.

You will lead security assessments, threat modeling, and remediation efforts while mentoring engineers and contributing to a culture of security awareness.