Senior Application Security Engineer — Threat Research & Cloud

Hispanic Alliance for Career Enhancement; Augusta (ME); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Benefits package

Paid time off

Retirement savings

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on-prem environments. You will blend secure development, threat research, and security architecture to reduce risk and protect patient data.

You will mentor engineers, influence security practices, and drive automations while collaborating with cross-functional teams to embed security early in the software lifecycle.

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years of programming or scripting experience (Java, Python, JS, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years of container technologies including Docker and Kubernetes.
• 3+ years of Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment.
• Promote secure coding practices and assist teams in remediating security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Perform threat modeling and vulnerability analysis to provide actionable recommendations.
• Design and support security technologies across cloud and enterprise environments.
• Collaborate with engineers, architects, and security stakeholders on security requirements.
• Participate in incident response activities and operational security support.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Docker

Kubernetes

Terraform

CI/CD

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on-prem environments. You will blend secure development, threat research, and security architecture to reduce risk and protect patient data.

You will mentor engineers, influence security practices, and drive automations while collaborating with cross-functional teams to embed security early in the software lifecycle.