Senior Threat Research Engineer - App Security

Partners in Digital Health; Concord (NH); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology and protect data at scale. You will embed security in development pipelines, drive policy enforcement, and mentor engineering teams while advancing security research and tooling across multi-cloud and on-prem environments.

The role emphasizes leadership in secure engineering, threat research, training, and incident response with a strong focus on reliability and governance.

Qualifications

• 10+ years in developing and deploying security technologies.
• 7+ years with Java, C/C++, C#, Python, JavaScript, Shell, PowerShell.
• 5+ years with public cloud (AWS/Azure/GCP) & Network Security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years implementing data protection and GDPR/CCPA compliance.
• 5+ years designing and managing Web Application Firewall (WAF).
• 5+ years performing vulnerability analysis and actionable remediation guidance.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Develop and enforce data security policies and standards.
• Drive security awareness across the organization.
• Lead the development and enforcement of comprehensive security policies and standards throughout the software development lifecycle.

Skills

Security engineering

Threat research

Policy development

Security leadership

Incident response

Education

Bachelor's degree

Tools

Docker

Kubernetes

Security-as-Code

Infrastructure-as-Code

WAF

Vulnerability tools

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology and protect data at scale. You will embed security in development pipelines, drive policy enforcement, and mentor engineering teams while advancing security research and tooling across multi-cloud and on-prem environments.

The role emphasizes leadership in secure engineering, threat research, training, and incident response with a strong focus on reliability and governance.