Senior Application Security Engineer - Threat Research

CVS Health; Olympia (WA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance security across cloud and enterprise environments. You will combine application security engineering, threat research, and secure software development practices to mitigate risks.

You will partner with engineering teams, conduct assessments, model threats, and build scalable defenses while mentoring others and influencing security across multiple squads.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with one or more programming languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code.
• 3+ years performing security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to embed security into design, development, testing, and deployment.
• Promote secure coding and remediate findings; contribute to security automation.
• Research threats, perform assessments, threat modeling, and vulnerability analysis.
• Design, configure, and manage security controls across cloud and enterprise environments.
• Communicate findings to engineers and leadership; mentor practitioners.

Skills

Application security

Threat research

Secure SDLC

Cloud security

AWS/Azure/GCP

Docker

Kubernetes

Threat modeling

Vulnerability analysis

CI/CD security

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance security across cloud and enterprise environments. You will combine application security engineering, threat research, and secure software development practices to mitigate risks.

You will partner with engineering teams, conduct assessments, model threats, and build scalable defenses while mentoring others and influencing security across multiple squads.