Senior Threat Research Engineer — Application Security Lead

Idaho Society of Professional Engineers; Boise, Northern (ID, KY); Hybrid; USD 144,000 - 288,000; Full time

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to lead security across complex healthcare tech, embedding security into development and pipelines. You will drive policy, threat research, and mentorship while guiding secure architectural decisions.

You will collaborate with engineering and business teams, oversee vulnerability analyses across multi-cloud environments, and lead incident response to strengthen resilience.

Qualifications

• 10+ years of experience developing and deploying security technologies.
• 7+ years with programming languages (Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell).
• 5+ years in Public Cloud and Network Security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and IaC.
• 5+ years implementing data protection measures and compliance (GDPR, CCPA).
• 5+ years designing and managing Web Application Firewall (WAF) and Layer 7 security solutions.
• 5+ years performing vulnerability analysis with remediation guidance.
• 3+ years leading security initiatives end-to-end.

Responsibilities

• Develop and enforce security policies and standards across engineering.
• Collaborate with engineering and business teams to implement secure practices.
• Analyze, configure security solutions across multi-cloud, on-premises, and colocation environments.
• Lead security testing and vulnerability analysis; document findings.
• Participate in 24/7 operational on-call with incident response leadership.
• Mentor engineers; establish ongoing security training.

Skills

Security engineering

Cloud security

Threat research

Secure SDLC

Vulnerability analysis

Leadership

Networking

Programming: Java/C++/Python

Education

Bachelor's degree

Tools

Docker

Kubernetes

WAF

Infrastructure as Code

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to lead security across complex healthcare tech, embedding security into development and pipelines. You will drive policy, threat research, and mentorship while guiding secure architectural decisions.

You will collaborate with engineering and business teams, oversee vulnerability analyses across multi-cloud environments, and lead incident response to strengthen resilience.