Staff App Security Engineer: Threat Research

CVS Health; Sacramento (CA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare tech across cloud and enterprise environments. You will embed security in the SDLC, perform threat modeling, and guide teams in secure design, testing, and deployment.

This is a senior role requiring hands-on security engineering, threat intelligence, and mentorship. You will collaborate with software engineers, platform teams, and security stakeholders to strengthen defenses, assess risks, and

Qualifications

• 7+ years of experience in application security or related fields.
• 5+ years of programming or scripting in Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell.
• 3+ years of securing public cloud environments (AWS, Azure, or GCP).
• 3+ years of container tech experience (Docker, Kubernetes).
• 3+ years of IaC/SecOps practices.
• 3+ years of application security assessments and threat modeling.

Responsibilities

• Implement and support application security standards and policies.
• Partner with engineering to integrate security into design, development, testing, and deployment.
• Promote secure coding practices and remediate findings.
• Contribute to security automation initiatives for efficiency and scalability.
• Research emerging threats, perform security assessments, and provide actionable recommendations.
• Design and support security technologies across cloud and enterprise environments.
• Collaborate with engineers, architects, and security stakeholders.
• Participate in design reviews to embed security early in the SDLC.
• Mentor engineers and share security knowledge.

Skills

Application security

Threat research

Secure development practices

Security assessments

Threat modeling

Mentorship

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare tech across cloud and enterprise environments. You will embed security in the SDLC, perform threat modeling, and guide teams in secure design, testing, and deployment.

This is a senior role requiring hands-on security engineering, threat intelligence, and mentorship. You will collaborate with software engineers, platform teams, and security stakeholders to strengthen defenses, assess risks, and