Senior Application Security Engineer - Threat Research

Partners in Digital Health; Indianapolis (IN); Hybrid; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Principal Application Security Engineer – Threat Research to secure health tech across the software lifecycle. You will lead threat research, develop secure practices, and mentor teams while embedding security in development pipelines and leveraging automation for resilience.

You will collaborate with engineering and business teams, drive policy adoption, and oversee security testing across multi-cloud environments.

Qualifications

• 10+ years of experience developing and deploying security technologies.
• 7+ years of experience with Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell.
• 5+ years of with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years of experience with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years of implementing and managing data protection measures and compliance.
• 5+ years of experience designing, implementing, and managing Web Application Firewall (WAF).
• 5+ years of vulnerability analysis and risk prioritization with remediation guidance.
• 3+ years of leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Develop and enforce data security policies and standards.
• Drive security awareness across the organization.
• Lead the development and enforcement of comprehensive security policies aligned with lifecycle security protocols.
• Collaborate with Engineering and Business teams to develop secure practices.
• Act as security leader, liaising with senior management to align security strategy with business goals.
• Analyze, configure security solutions across multi-cloud, on-prem, and colocation environments.
• Lead security testing, vulnerability analysis, and documentation.
• Evaluate and deploy cutting-edge security solutions for scalability and resilience.
• Provide incident response leadership during on-call rotations and outages.
• Mentor engineers through a formal security training program.
• Engage in security research and contribute to open-source communities.
• Contribute to strategic security roadmap with risk assessments and budgeting.

Skills

Security engineering

Threat research

Cloud security

DevSecOps

WAF & network security

Vulnerability management

Leadership

Incident response

Education

Bachelor's degree

Tools

Docker

Kubernetes

Security automation

Infrastructure as Code

WAF expertise

Job description

CVS Health is seeking a Principal Application Security Engineer – Threat Research to secure health tech across the software lifecycle. You will lead threat research, develop secure practices, and mentor teams while embedding security in development pipelines and leveraging automation for resilience.

You will collaborate with engineering and business teams, drive policy adoption, and oversee security testing across multi-cloud environments.