Staff App Security Engineer – Threat Research

CVS Health; Charleston (WV); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits package

Bonus eligibility

Job summary

CVS Health is seeking a Staff Application Security Engineer focused on threat research to strengthen security across cloud and enterprise environments. You will partner with engineering teams to embed security into design, development, testing, and deployment, and drive scalable security solutions that protect applications and data.

You will mentor engineers, conduct security assessments, and contribute to advancing secure coding practices while influencing multiple teams toward safer software

Qualifications

• 7+ years in application security or related roles.
• 5+ years programming in Java, Python, JavaScript, C# or C/C++, PowerShell, or Shell scripting.
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, threat modeling, and vulnerability analysis.

Responsibilities

• Security Engineering & Secure Development: implement and support security standards, policies, and best practices.
• Threat Research & Analysis: research threats, perform threat modeling and vulnerability analysis.
• Security Solutions & Architecture: design and manage security controls across cloud and on‑prem environments.
• Collaboration & Communication: work with engineers and security stakeholders, communicate findings clearly.
• Incident Response & Operational Support: participate in security investigations and remediation activities.
• Mentorship & Knowledge Sharing: mentor engineers and share knowledge through trainings and docs.
• Innovation & Continuous Improvement: evaluate new security tools and contribute to research initiatives.

Skills

Application security

Threat research

Secure SDLC

Security architecture

Cloud security

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer focused on threat research to strengthen security across cloud and enterprise environments. You will partner with engineering teams to embed security into design, development, testing, and deployment, and drive scalable security solutions that protect applications and data.

You will mentor engineers, conduct security assessments, and contribute to advancing secure coding practices while influencing multiple teams toward safer software