Senior Threat Research Security Engineer – App Security

Colorado Psychiatric; Denver, Northern (CO, KY); Hybrid; USD 144,000 - 288,000; Full time

Benefits offered by this job

Comprehensive benefits

Performance bonus

Equity

Job summary

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology across multi-cloud and on‑prem environments. You will drive security policy, protect data, and mentor engineers while embedding security into development pipelines and automating controls.

You will lead security testing, incident response, and research initiatives, shaping a strategic security roadmap that aligns with business goals.

Qualifications

• 10+ years of experience developing and deploying security technologies.
• 7+ years with one or more general-purpose programming languages (Java, C/C++, C#, Python, JavaScript, Shell, PowerShell).
• 5+ years with Public Cloud (AWS/Azure/GCP) & Network Security.
• 5+ years with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
• 5+ years implementing data protection measures and compliance.
• 5+ years designing and managing Web Application Firewall (WAF) and Layer 7 security.
• 5+ years performing vulnerability analysis with remediation guidance.
• 3+ years leading security initiatives from inception to deployment.

Responsibilities

• Develop and enforce security policies and standards across the software lifecycle.
• Collaborate with Engineering and Business teams to implement secure engineering practices.
• Analyze and configure security solutions across multi-cloud, on-premises, and colocation environments.
• Lead security testing, vulnerability analysis, and documentation.
• Participate in 24/7 operational on-call duties across regions.

Skills

Security engineering

Threat research

Leadership

Mentorship

Policy development

Education

Bachelor's degree or equivalent experience

Tools

Docker

Kubernetes

Security as Code

Infrastructure as Code

Job description

CVS Health is seeking a Principal Application Security Engineer - Threat Research to secure healthcare technology across multi-cloud and on‑prem environments. You will drive security policy, protect data, and mentor engineers while embedding security into development pipelines and automating controls.

You will lead security testing, incident response, and research initiatives, shaping a strategic security roadmap that aligns with business goals.