Senior Application Security Engineer – Threat Research

Partners in Digital Health; Montgomery (AL); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software through threat research, secure SDLC practices, and collaboration with engineering teams. You will assess risks, remediate findings, and strengthen defenses across cloud and on-premise environments.

The role emphasizes mentorship, innovation, and advancing security posture while delivering scalable solutions for protecting applications and healthcare data.

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years of programming or scripting in Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell.
• 3+ years securing public cloud environments (AWS, Azure or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment.
• Promote secure coding practices and assist teams in remediating findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, conduct threat modeling, and provide actionable recommendations.
• Design, configure, and support security technologies across cloud and enterprise environments.
• Collaborate with software engineers and security stakeholders; communicate findings clearly.
• Participate in security investigations and incident response activities as needed.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Education

Bachelor's degree

Tools

Docker

Kubernetes

Infrastructure as Code

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software through threat research, secure SDLC practices, and collaboration with engineering teams. You will assess risks, remediate findings, and strengthen defenses across cloud and on-premise environments.

The role emphasizes mentorship, innovation, and advancing security posture while delivering scalable solutions for protecting applications and healthcare data.