Staff App Security Engineer - Threat Research (Equity Eligible)

CVS Health; Saint Paul (MN); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise. You will drive security in the software development lifecycle, conduct threat modeling, vulnerability analysis, and collaborate with engineering teams to embed protections.

You will mentor engineers, lead security automation and research initiatives, and help evolve threat intelligence capabilities.

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years with one or more programming languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with Docker & Kubernetes.
• 3+ years with IaC or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and assist teams in remediating security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Perform application security assessments, threat modeling, and vulnerability analysis.
• Evaluate risks and provide actionable recommendations to engineering teams.

Skills

Application security

Security assessments

Threat modeling

Cloud security

Docker & Kubernetes

Infrastructure as Code

Threat research

Security automation

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CI/CD tooling

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise. You will drive security in the software development lifecycle, conduct threat modeling, vulnerability analysis, and collaborate with engineering teams to embed protections.

You will mentor engineers, lead security automation and research initiatives, and help evolve threat intelligence capabilities.