Senior Application Security Engineer: Threat Research

Hispanic Alliance for Career Enhancement; Washington (District of Columbia); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will partner with engineering teams to embed security into design, development, testing, and deployment while conducting threat research and vulnerability analysis.

In this role, you will mentor engineers, contribute to security automation, and help shape scalable security architectures.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with one or more programming languages (see required languages).
• 3+ years securing cloud environments (AWS/Azure/GCP).
• 3+ years with Docker & Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code.

Responsibilities

• Security engineering: implement standards, integrate security into SDLC and deployment processes.
• Threat research: assess threats, threat modeling, vulnerability analysis.
• Design and manage security across cloud and on‑prem environments.
• Collaborate with engineers, architects, and security stakeholders.
• Mentor engineers and share security knowledge.
• Participate in incident response and remediation strategies.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Education

Bachelor's degree

Tools

AWS

Azure

Google Cloud Platform

Docker

Kubernetes

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will partner with engineering teams to embed security into design, development, testing, and deployment while conducting threat research and vulnerability analysis.

In this role, you will mentor engineers, contribute to security automation, and help shape scalable security architectures.