Staff App Security Engineer - Threat Research

Partners in Digital Health; Tallahassee (FL); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking an experienced Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the SDLC, perform threat modeling, and drive scalable security controls while mentoring engineers and shaping security practices.

Lead security initiatives, evaluate emerging threats, and collaborate with cross‑functional teams to reduce risk.

Qualifications

• 7+ years in application security, information security, or related roles.
• 5+ years programming/scripting in Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell.
• 3+ years in securing public cloud (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes; IaC/Security as Code experience.

Responsibilities

• Implement secure development standards and policies across teams.
• Partner with engineering to bake security into design, development, testing, and deployment.
• Promote secure coding and remediate findings; drive secure SDLC.
• Contribute to security automation for efficiency and scalability.
• Research emerging threats and perform threat modeling and vulnerability analysis.
• Design and manage security controls across cloud and on‑prem environments.
• Mentor engineers and share security knowledge through trainings.

Skills

Application security

Threat research

Secure development

Cloud security

Security tooling

Incident response

Mentorship

Security architecture

Education

Bachelor's degree

Tools

Docker

Kubernetes

CI/CD

WAF / API security

Job description

CVS Health is seeking an experienced Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the SDLC, perform threat modeling, and drive scalable security controls while mentoring engineers and shaping security practices.

Lead security initiatives, evaluate emerging threats, and collaborate with cross‑functional teams to reduce risk.