Staff App Sec Engineer — Threat Research & Cloud

CVS Health; Baton Rouge (LA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and on-prem environments. You will blend threat research, secure development, and architectural guidance to reduce risks and strengthen defenses.

You will mentor teams, drive secure coding practices, and contribute to scalable security solutions while collaborating with engineers, architects, and security stakeholders.

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years of experience with programming or scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, Shell).
• 3+ years of experience securing public cloud environments (AWS, Azure, GCP).
• 3+ years of experience with container technologies (Docker, Kubernetes).
• 3+ years of experience with IaC or Security as Code.
• 3+ years of experience performing application security assessments, threat modeling, and vulnerability analysis.

Responsibilities

• Security Engineering & Secure Development: implement and support security standards; drive secure coding practices; integrate security into SDLC.
• Threat Research & Analysis: research threats; conduct assessments; evaluate risks and provide actionable recommendations.
• Security Solutions & Architecture: design and manage security controls; support vulnerabilities programs; develop scalable architectures.
• Collaboration & Communication: work with engineers and stakeholders; participate in design reviews; translate findings for non-technical audiences.
• Incident Response & Operational Support: assist investigations and remediation; support cloud and enterprise security operations.
• Mentorship & Knowledge Sharing: mentor engineers; share trainings and documentation; promote security learning culture.
• Innovation & Continuous Improvement: evaluate new tools; contribute to security research and PoCs; suggest process improvements.

Skills

Application security

Threat research

Programming languages

Cloud security

Container security

Infrastructure as Code

Threat modeling

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and on-prem environments. You will blend threat research, secure development, and architectural guidance to reduce risks and strengthen defenses.

You will mentor teams, drive secure coding practices, and contribute to scalable security solutions while collaborating with engineers, architects, and security stakeholders.