Senior Application Security Engineer - Threat Research

NHSHP; Concord (NH); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare tech. You will combine application security engineering, threat research, and secure development to mitigate risks across cloud and on‑prem environments.

You will embed security across the SDLC, conduct assessments, research threats, and build scalable solutions while mentoring teams and advancing the organization’s security posture.

Qualifications

• 7+ years of experience in application security or related roles.

Responsibilities

• Implement and support application security standards and best practices.
• Partner with engineering to integrate security into design, development, testing, and deployment.
• Promote secure coding and remediate findings.
• Contribute to security automation for efficiency and scalability.
• Research emerging threats and perform threat modeling and vulnerability analysis.
• Design and support security controls across cloud and enterprise environments.
• Collaborate with engineers, architects, and security stakeholders.
• Participate in incident response and post‑incident remediation.

Skills

Application security

Threat research

DevSecOps

Cloud security

Threat modeling

Security assessments

Java

Python

JavaScript

C#

C/C++

Education

Bachelor's degree

Tools

AWS

Azure

Google Cloud

Docker

Kubernetes

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare tech. You will combine application security engineering, threat research, and secure development to mitigate risks across cloud and on‑prem environments.

You will embed security across the SDLC, conduct assessments, research threats, and build scalable solutions while mentoring teams and advancing the organization’s security posture.