Senior Application Security Engineer, Threat Research

Partners in Digital Health; Lansing (MI); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the SDLC, conduct assessments, model threats, and build scalable defenses while mentoring teams.

You will collaborate with engineers, architects, and security stakeholders to implement standards, automate security, and improve detection capabilities.

Qualifications

• 7+ years in application or information security
• 5+ years programming in Java, Python, JavaScript, C#, or C/C++
• 3+ years in cloud environments (AWS, Azure, or GCP)
• 3+ years with Docker and Kubernetes
• 3+ years with Infrastructure as Code or Security as Code
• 3+ years in assessments, threat modeling, and vulnerability analysis

Responsibilities

• Embed security into the software development lifecycle and conduct security assessments
• Research emerging threats and perform threat modeling to drive risk-based decisions
• Design, configure, and support security technologies across cloud and on-prem environments
• Collaborate with engineers, architects, and security stakeholders to implement security controls
• Mentor engineers and practitioners, and contribute to security automation and improvement initiatives
• Support incident response and remediation efforts and drive continuous security improvements

Skills

Application security

Threat research

Cloud security

Threat modeling

Security assessments

DevSecOps

Education

Bachelor's degree

Tools

Docker

Kubernetes

Infrastructure as Code

Security as Code

CI/CD tooling

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the SDLC, conduct assessments, model threats, and build scalable defenses while mentoring teams.

You will collaborate with engineers, architects, and security stakeholders to implement standards, automate security, and improve detection capabilities.