Senior Application Security & Threat Research Engineer

Partners in Digital Health; Santa Fe (NM); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical insurance

Dental coverage

Vision coverage

Paid time off

Retirement savings

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will integrate security into the SDLC, assess threats, and mentor teams to reduce risk.

You will collaborate with engineering, platform, and security stakeholders, perform threat modeling, and drive scalable security controls and automation to protect applications and data in a fast‑paced healthcare ecosystem.

Qualifications

• 7+ years in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages (Java, Python, JS, C#, C/C++, PowerShell, Shell).
• 3+ years securing public cloud environments (AWS, Azure, GCP).
• 3+ years with container technologies (Docker, Kubernetes).
• 3+ years IaC or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: implement standards and promote secure coding.
• Threat Research & Analysis: research threats, perform assessments, model threats.
• Security Solutions & Architecture: design security controls across cloud/enterprise.
• Collaboration & Communication: work with engineers and security stakeholders.
• Incident Response & Operational Support: assist investigations and remediation.
• Mentorship & Knowledge Sharing: train engineers and share knowledge.
• Innovation & Continuous Improvement: evaluate tools and drive improvements.

Skills

7+ years in application security

Programming/scripting experience

Cloud security (AWS/Azure/GCP)

Docker and Kubernetes

Infrastructure as Code / Security as‑a

Threat modeling / vulnerability分析

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will integrate security into the SDLC, assess threats, and mentor teams to reduce risk.

You will collaborate with engineering, platform, and security stakeholders, perform threat modeling, and drive scalable security controls and automation to protect applications and data in a fast‑paced healthcare ecosystem.