Senior AppSec Threat Research Engineer

CVS Health; Concord (NH); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and enterprise environments. You will embed security into the software development lifecycle, perform threat research, and build scalable controls while mentoring teams to improve the organization's security posture.

You will collaborate with software engineers, architects, and security stakeholders to design, implement, and operate security solutions, including data

Qualifications

• 7+ years experience in application security or related roles.
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years with containers (Docker/Kubernetes).
• 3+ years performing security assessments and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and assist teams in remediating security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Perform application security assessments, threat modeling, and vulnerability analysis.
• Evaluate risks and provide actionable recommendations to engineering teams.
• Leverage threat intelligence to enhance application security controls and detection capabilities.

Skills

App security

Cloud security

Docker/Kubernetes

Threat modeling

Security assessments

IaC

Team collaboration

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and enterprise environments. You will embed security into the software development lifecycle, perform threat research, and build scalable controls while mentoring teams to improve the organization's security posture.

You will collaborate with software engineers, architects, and security stakeholders to design, implement, and operate security solutions, including data