Senior Application Security Threat Research Engineer

Koitecc Solutions; Tallahassee (FL); Hybrid; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure health software across cloud and enterprise environments. You will embed security throughout the software development lifecycle, perform threat research, and build scalable defenses while mentoring teams and influencing security practices.

The role emphasizes security engineering, threat analysis, architecture design, and collaboration with engineers, architects, and security stakeholders to improve the

Qualifications

• 7+ years in application security or related roles.
• 5+ years with programming languages (Java, Python, JavaScript, C#, C/C++, PowerShell, Shell).
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years of Infrastructure as Code or Security as Code practices.
• 3+ years of application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and remediate security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, conduct security assessments, threat modeling, and vulnerability analysis.
• Design, configure, and support security technologies across cloud and enterprise environments.

Skills

Application security

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Threat modeling

Secure SDLC

Mentorship

Education

Bachelor's degree

Tools

AWS

Azure

Google Cloud

Docker

Kubernetes

Infrastructure as Code

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure health software across cloud and enterprise environments. You will embed security throughout the software development lifecycle, perform threat research, and build scalable defenses while mentoring teams and influencing security practices.

The role emphasizes security engineering, threat analysis, architecture design, and collaboration with engineers, architects, and security stakeholders to improve the