Senior Threat Research & App Security Engineer

Koitecc Solutions; Lincoln (NE); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology and protect data at scale. You will embed security into development pipelines and drive automation across the software lifecycle.

You will lead security policy development, mentor engineers, and collaborate with multi-disciplinary teams to strengthen defenses, manage threats, and advance security research across the enterprise.

Qualifications

• 10+ years of experience developing and deploying security technologies.
• 7+ years with one or more general-purpose programming languages including Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell.
• 5+ years with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years implementing data protection measures and compliance with data protection regulations (e.g., GDPR, CCPA).
• 5+ years designing, implementing, and managing Web Application Firewall (WAF) and Layer 7 security solutions.
• 5+ years performing vulnerability analysis and risk prioritization with actionable remediation guidance.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Develop and enforce data security policies and standards.
• Drive security awareness across the organization.
• Lead development and enforcement of security policies throughout the software development lifecycle.
• Collaborate with Engineering and Business teams to develop secure engineering practices.
• Act as a security leader, liaising with senior management to align security with business goals.
• Analyze, develop, and configure security solutions across multi-cloud and on‑prem environments.
• Lead security testing, vulnerability analysis, and documentation.
• Spearhead evaluation and deployment of cutting-edge security solutions for scalability and performance.
• Participate in 24/7 incident response and on-call duties.
• Mentor junior engineers and develop a security mentorship program.
• Drive security research and open‑source collaboration.

Skills

Java

C/C++

C#

Python

JavaScript

Shell Script

PowerShell

Education

Bachelor's degree

Tools

Docker

Kubernetes

Security as Code

Infrastructure as Code

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology and protect data at scale. You will embed security into development pipelines and drive automation across the software lifecycle.

You will lead security policy development, mentor engineers, and collaborate with multi-disciplinary teams to strengthen defenses, manage threats, and advance security research across the enterprise.