Senior Threat-Research Engineer, Application Security

Partners in Digital Health; Hartford (CT); On-site; USD 144,000 - 288,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology, embedding security into development pipelines and enhancing data protection across multi-cloud and on-prem environments.

You will mentor engineers, drive security standards, and lead cutting‑edge research to strengthen defenses while aligning with business goals and regulatory requirements. This is a full‑time, on‑site role with comprehensive benefits.

Qualifications

• 10+ years of experience in developing and deploying security technologies.
• 7+ years with general-purpose languages (Java, C/C++, C#, Python, JavaScript, Shell, PowerShell).
• 5+ years of with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years of with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years of implementing data protection measures and regulatory compliance (GDPR, CCPA).
• 5+ years of designing and managing Web Application Firewall (WAF) and Layer 7 security.
• 5+ years of vulnerability analysis and risk prioritization with remediation guidance.
• 3+ years of leading security initiatives from inception through deployment.

Responsibilities

• Develop and enforce engineering security policies and standards.
• Lead security testing, vulnerability analysis, and documentation.
• Collaborate with Engineering and Business teams to develop secure practices.
• Lead security strategy aligning with business objectives.

Skills

Java/C/C++/Python

Security engineering

Cloud security

Docker/Kubernetes

WAF & AppSec

Vulnerability analysis

Leadership & mentorship

Security strategy

Incident response

Compliance knowledge

Education

Bachelor's degree or equivalent

Tools

Snowflake security

Security testing tools

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology, embedding security into development pipelines and enhancing data protection across multi-cloud and on-prem environments.

You will mentor engineers, drive security standards, and lead cutting‑edge research to strengthen defenses while aligning with business goals and regulatory requirements. This is a full‑time, on‑site role with comprehensive benefits.