Senior Application Security & Threat Research Engineer

CVS Health; Jefferson City (MO); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software across cloud and enterprise environments. You will embed security throughout the SDLC, conduct assessments, research threats, and build scalable security solutions while mentoring teams.

You will collaborate with engineers, architects, and security stakeholders to drive secure design, development, and incident response, delivering resilient defenses and continuous security

Qualifications

• 7+ years in application security, information security, software engineering, or related roles.
• 5+ years with one or more programming/scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, Shell).
• 3+ years securing public cloud environments (AWS, Azure, or Google Cloud).
• 3+ years working with Docker and Kubernetes.
• 3+ years of IaC or Security as Code practices.
• 3+ years of app security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: implement and support application security standards and best practices; integrate security into design, development, testing, and deployment; promote secure coding and remediation of findings; contribute to security automation.

Skills

Application security

Threat research

Secure SDLC

Threat modeling

Cloud security

DevSecOps

Security assessments

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

IaC tools

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software across cloud and enterprise environments. You will embed security throughout the SDLC, conduct assessments, research threats, and build scalable security solutions while mentoring teams.

You will collaborate with engineers, architects, and security stakeholders to drive secure design, development, and incident response, delivering resilient defenses and continuous security