Staff AI Security Engineer — Secure AI & Agentic Systems

Hispanic Alliance for Career Enhancement; Nashville (TN); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical benefits

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - AI & Agentic Systems to secure the next generation of AI-enabled apps and agentic workflows. You will define secure design patterns, conduct threat modeling, and guide teams on secure development practices while advancing responsible AI security controls across the enterprise.

As a senior technical contributor, you will collaborate with engineering, product, platform, and data teams to embed security into AI-enabled solutions and

Qualifications

• 7+ years of experience designing, building, or securing enterprise-scale applications and platforms.
• 5+ years of application security experience, including threat modeling, secure design, code review, and vulnerability management.
• 5+ years of programming experience in one or more languages such as Python, Java, JavaScript, C#, or Go.
• 3+ years of experience developing or securing AI, machine learning, or generative AI solutions.
• 3+ years of experience with public cloud platforms including AWS, Azure, or Google Cloud Platform.

Responsibilities

• Develop and maintain application and AI security standards, best practices, and guardrails.
• Promote secure-by-design principles across application and AI development lifecycles.
• Establish secure design patterns for AI agents, prompt management, tool integrations, memory handling, and autonomous workflows.
• Partner with engineering teams to identify and mitigate AI-specific security risks such as prompt injection, model abuse, data leakage, and unauthorized agent actions.
• Serve as a subject matter expert supporting the security of AI-enabled applications and agentic systems.
• Review architectures utilizing large language models, retrieval augmented generation pipelines, AI agents, and AI-powered workflows.
• Define and recommend identity, authorization, data protection, observability, and governance controls for AI environments.
• Collaborate with AI platform, engineering, product, and data teams to ensure secure and responsible AI adoption.
• Perform threat modeling, architecture reviews, and security assessments for applications and AI-enabled systems.
• Conduct security analysis of AI workflows, model integrations, agent interactions, and data flows.
• Partner with engineering teams to prioritize and remediate security findings.
• Evaluate emerging AI security tools and technologies to improve organizational security posture.
• Influence engineering teams to integrate security controls into development processes and product roadmaps.
• Partner with privacy, compliance, legal, and risk teams to align security controls with organizational requirements.
• Provide guidance on AI security considerations, emerging threats, and industry best practices.
• Participate in strategic initiatives supporting secure AI adoption across the enterprise.
• Support investigation and response efforts involving application and AI-related security events.
• Assist in identifying root causes and implementing long-term security improvements.
• Drive continuous improvement of security controls, processes, and engineering practices.
• Mentor security engineers and development teams on secure coding, threat modeling, and AI security best practices.
• Contribute to the evaluation of emerging AI security research, technologies, and industry standards.
• Help advance the organization's application and AI security strategy through innovation and technical leadership.

Skills

Application security

Threat modeling

Programming languages

AI/ML security

Cloud platforms

Education

Bachelor's degree

Job description

CVS Health is seeking a Staff Application Security Engineer - AI & Agentic Systems to secure the next generation of AI-enabled apps and agentic workflows. You will define secure design patterns, conduct threat modeling, and guide teams on secure development practices while advancing responsible AI security controls across the enterprise.

As a senior technical contributor, you will collaborate with engineering, product, platform, and data teams to embed security into AI-enabled solutions and