Senior Threat Research & Application Security Engineer

Koitecc Solutions; Hartford (CT); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare software and data at scale. You will drive security design, implement it in pipelines, and automate for resilience across complex environments.

You will lead policy development, threat research, and mentorship of engineering teams while shaping secure systems across the enterprise with a focus on privacy, trust, and compliance.

Qualifications

• 10+ years of experience developing and deploying security technologies.
• 7+ years with one or more general-purpose programming languages (Java, C/C++, C#, Python, JS, Shell, PowerShell).
• 5+ years with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years of implementing data protection measures and compliance (GDPR, CCPA).
• 5+ years designing and managing Web Application Firewall (WAF) and Layer 7 security.
• 5+ years performing vulnerability analysis and remediation guidance.
• 3+ years leading security initiatives end-to-end.

Responsibilities

• Develop and enforce security policies and standards across engineering.
• Lead data security policies, drive security awareness, and embed security in SDLC.
• Collaborate with Engineering and Business to promote secure practices.
• Analyze, configure security solutions across multi-cloud/on-prem environments; ensure data integrity, confidentiality, availability.
• Lead security testing, vulnerability analysis, and documentation.
• Participate in 24/7 incident response and strengthen resilience.
• Mentor junior engineers and establish security training programs.
• Drive security research and contribute to open-source projects.
• Strategic planning of security roadmap and budget alignment.

Skills

Security technologies

Programming languages

Public Cloud & Network Security

Docker & Kubernetes

Security as Code / IaC

Data protection & compliance

Web Application Firewall (WAF) & Layer

Vulnerability analysis & remediation

Security leadership & project mgmt

Incident response leadership

Education

Bachelor's degree or equivalent experience

Tools

Docker

Kubernetes

Snowflake

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare software and data at scale. You will drive security design, implement it in pipelines, and automate for resilience across complex environments.

You will lead policy development, threat research, and mentorship of engineering teams while shaping secure systems across the enterprise with a focus on privacy, trust, and compliance.