Staff App Security Engineer: Threat Research & Cloud

Partners in Digital Health; Oklahoma City (OK); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software across cloud and enterprise environments. You will embed security in the SDLC, conduct assessments, research threats, and build scalable security solutions with a team of engineers and security stakeholders.

You will influence security practices, lead threat modeling, and drive risk-based decisions while mentoring colleagues and improving overall security posture.

Qualifications

• 7+ years of experience in application security, information security, or related roles.
• 5+ years of experience with programming/scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell.
• 3+ years of experience securing public cloud environments (AWS/Azure/GCP).
• 3+ years of experience with Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments and threat modeling.

Responsibilities

• Implement and support application security standards and practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment.
• Promote secure coding and remediate findings.
• Contribute to security automation initiatives.
• Research emerging threats and perform threat modeling and vulnerability analysis.
• Evaluate risks and provide actionable recommendations to engineering teams.
• Design and support security controls across cloud and enterprise environments.
• Mentor engineers and share security knowledge.
• Participate in incident response and operational security activities.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

AWS cloud

Azure cloud

GCP

Docker

Kubernetes

Infrastructure as Code

Threat modeling

Application security assessments

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software across cloud and enterprise environments. You will embed security in the SDLC, conduct assessments, research threats, and build scalable security solutions with a team of engineers and security stakeholders.

You will influence security practices, lead threat modeling, and drive risk-based decisions while mentoring colleagues and improving overall security posture.