Senior Application Security Engineer, Threat Research

Koitecc Solutions

Columbus (OH)

On-site

USD 107,000 - 284,000

Full time

9 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the software development lifecycle, lead threat modeling, and partner with engineering teams to mitigate risks and strengthen defenses.

You will mentor engineers, drive security automation, and influence design reviews to ensure robust controls.

Qualifications

7+ years in application security, information security, software engineering, or related roles.
5+ years with Java, Python, JavaScript, C#, C/C++, PowerShell or Shell scripting.
3+ years securing public cloud environments (AWS, Azure, or GCP).
3+ years with Docker and Kubernetes.
3+ years of Infrastructure as Code or Security as Code practices.
3+ years performing application security assessments, threat modeling, vulnerability analysis.

Responsibilities

Implement and support application security standards, policies, and best practices.
Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
Promote secure coding practices and remediate security findings.
Contribute to security automation initiatives for efficiency and scalability.
Research emerging threats and perform threat modeling and vulnerability analysis.
Design and manage security controls across cloud and enterprise environments.
Support vulnerability management and remediation programs.
Mentor engineers and share knowledge to improve security posture.