Senior Threat Research & Application Security Lead

Partners in Digital Health; Tallahassee (FL); On-site; USD 144,000 - 288,000; Full time

Job summary

CVS Health seeks a Principal Application Security Engineer - Threat Research to secure healthcare technology and lead security across the software lifecycle. Embed security into development pipelines, drive threat research, and mentor teams while shaping enterprise security strategy.

Responsibilities include policy development, cross-functional collaboration, cloud and on-prem security, incident response, and strategic planning to strengthen resilience across multi-region environments.

Qualifications

• 10+ years in developing and deploying security technologies.
• 7+ years with one or more general-purpose languages (Java, C/C++, C#, Python, JavaScript, Shell, PowerShell).
• 5+ years in Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years implementing data protection measures and regulatory compliance.
• 5+ years designing and managing Web Application Firewall (WAF) solutions.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce security policies and standards across engineering.
• Lead security awareness and integration of secure practices in SDLC.
• Collaborate with engineering and business teams on secure engineering.
• Analyze, configure and deploy security solutions across multi-cloud and on-prem environments.
• Lead security testing, vulnerability analysis, and documentation.
• Participate in 24/7 incident response and on-call duties.

Skills

Security engineering

Threat research

Cross-functional leadership

Security policies

Cloud security

Education

Bachelor's degree or equivalent

Tools

Docker

Kubernetes

Security as Code

Infrastructure as Code

WAF & web security

Job description

CVS Health seeks a Principal Application Security Engineer - Threat Research to secure healthcare technology and lead security across the software lifecycle. Embed security into development pipelines, drive threat research, and mentor teams while shaping enterprise security strategy.

Responsibilities include policy development, cross-functional collaboration, cloud and on-prem security, incident response, and strategic planning to strengthen resilience across multi-region environments.