Senior Threat Research & Application Security Engineer

Hispanic Alliance for Career Enhancement; Denver (CO); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by blending application security engineering, threat research, and secure development.

You will partner with engineering teams to identify risks, implement controls, mentor others, and advance security across cloud and enterprise environments. This role focuses on embedding security in the software lifecycle and conducting security assessments and threat modeling.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years of experience securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years of experience with container technologies including Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: implement and support security standards and best practices; integrate security into design, development, testing and deployment; promote secure coding practices; contribute to security automation.
• Threat Research & Analysis: research threats and trends; perform assessments, threat modeling and vulnerability analysis; provide actionable recommendations.
• Security Solutions & Architecture: design and support security technologies across cloud and enterprise; manage controls protecting apps, APIs and data; support vulnerability management.
• Collaboration & Communication: work with engineers, architects, platform teams and stakeholders; participate in design reviews; communicate findings clearly.
• Incident Response & Operational Support: participate in investigations and response; support cloud and enterprise security functions; identify root causes and remediation.
• Mentorship & Knowledge Sharing: mentor engineers; conduct trainings and documentation; foster security awareness.
• Innovation & Continuous Improvement: evaluate tools; contribute to research; propose process improvements.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CI/CD pipelines

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by blending application security engineering, threat research, and secure development.

You will partner with engineering teams to identify risks, implement controls, mentor others, and advance security across cloud and enterprise environments. This role focuses on embedding security in the software lifecycle and conducting security assessments and threat modeling.