Senior Application Security Engineer – Threat Research

CVS Health; Nashville (TN); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health in Nashville is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security across the SDLC, conduct threat research and vulnerability analyses, and mentor teams while partnering with engineers to build scalable defenses.

The role emphasizes collaboration, incident response support, and continuous improvement in a complex healthcare technology landscape.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with programming or scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and uphold application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and assist teams in remediating security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Perform application security assessments, threat modeling, and vulnerability analysis.
• Evaluate risks and provide actionable recommendations to engineering teams.

Skills

Application security

Threat research

Cloud security

Container security

Security assessments

Threat modeling

Secure development lifecycle

Education

Bachelor's degree

Tools

Docker

Kubernetes

Infrastructure as Code

Job description

CVS Health in Nashville is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security across the SDLC, conduct threat research and vulnerability analyses, and mentor teams while partnering with engineers to build scalable defenses.

The role emphasizes collaboration, incident response support, and continuous improvement in a complex healthcare technology landscape.