Senior Application Security Engineer: Threat Research

CVS Health; New York (NY); Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Retirement benefits

Paid time off

Job summary

CVS Health is seeking a Staff Application Security Engineer – Threat Research to secure healthcare software across cloud and enterprise environments. You’ll embed security across the SDLC, conduct assessments, and drive scalable protections while mentoring teams and influencing security practices.

You will research threats, perform threat modeling, and design architectures to protect applications, APIs, and data with a focus on continuous improvement and collaboration across engineering groups.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with programming languages such as Java, Python, JavaScript, C#, C/C++, PowerShell or Shell scripting.
• 3+ years securing public cloud environments (AWS, Azure, GCP).
• 3+ years container tech including Docker and Kubernetes.
• 3+ years Infrastructure as Code or Security as Code practices.
• 3+ years performing security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards and best practices.
• Integrate security into design, development, testing and deployment processes.
• Promote secure coding and remediate findings with engineering teams.
• Contribute to security automation to improve efficiency and scale.
• Research emerging threats and perform threat modeling and vulnerability analysis.
• Design and support security controls across cloud and on-prem environments.
• Collaborate with engineers, architects, and security stakeholders.
• Lead incident response activities and support security operations.
• Mentor engineers and share knowledge through trainings and docs.
• Evaluate new security tools and contribute to research initiatives.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

AWS

Azure

GCP

Threat modeling

Vulnerability analysis

Security assessments

Education

Bachelor’s degree

Tools

Docker

Kubernetes

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer – Threat Research to secure healthcare software across cloud and enterprise environments. You’ll embed security across the SDLC, conduct assessments, and drive scalable protections while mentoring teams and influencing security practices.

You will research threats, perform threat modeling, and design architectures to protect applications, APIs, and data with a focus on continuous improvement and collaboration across engineering groups.