Senior Application Security Engineer - Threat Research

Colorado Psychiatric; Denver (CO); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to strengthen security across cloud and enterprise environments, embedding security into the software development lifecycle.

You'll partner with engineering teams to identify risks, conduct assessments, and drive secure design, threat modeling, and remediation, while mentoring engineers and advancing security automation initiatives.

Qualifications

• 7+ years in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years of experience securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years of experience with container technologies including Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development
• Threat Research & Analysis
• Security Solutions & Architecture
• Collaboration & Communication
• Incident Response & Operational Support
• Mentorship & Knowledge Sharing
• Innovation & Continuous Improvement

Skills

Application security

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

AWS

Azure

GCP

Docker

Kubernetes

Infrastructure as Code

Threat modeling

Vulnerability assessment

Education

Bachelor's degree

Tools

CI/CD tools

Terraform

AWS Console

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to strengthen security across cloud and enterprise environments, embedding security into the software development lifecycle.

You'll partner with engineering teams to identify risks, conduct assessments, and drive secure design, threat modeling, and remediation, while mentoring engineers and advancing security automation initiatives.