Senior Application Security Engineer - Threat Research

Stryker Corporation; Phoenix (AZ); On-site; Confidential; Full time

Benefits offered by this job

Comprehensive benefits

Medical, dental, vision

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare tech across cloud and enterprise environments. You will embed security in the SDLC, conduct assessments, model threats, and mentor teams while driving scalable security solutions.

You will partner with software engineers and security stakeholders to improve detection, controls, and remediation, contributing to a stronger security posture across multiple platforms.

Qualifications

• 7+ years in application or information security or related roles.
• 5+ years with languages like Java, Python, JavaScript, C#, C/C++, PowerShell or Shell.
• 3+ years in cloud security (AWS/Azure/GCP).
• 3+ years with Docker and Kubernetes in production.
• 3+ years with IaC and Security as Code practices.
• 3+ years in app security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Design and implement secure development practices and standards.
• Partner with engineers to embed security in design, code, testing and deployment.
• Promote secure coding and remediate findings.
• Lead security automation initiatives to scale controls.
• Conduct threat research, assessments, and vulnerability analysis.
• Mentor engineers and share knowledge to improve security posture.

Skills

Application security

Threat research

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

AWS

Azure

GCP

Docker

Kubernetes

Infrastructure as Code

Security as Code

Threat modeling

Vulnerability analysis

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare tech across cloud and enterprise environments. You will embed security in the SDLC, conduct assessments, model threats, and mentor teams while driving scalable security solutions.

You will partner with software engineers and security stakeholders to improve detection, controls, and remediation, contributing to a stronger security posture across multiple platforms.