Staff App Security Engineer: Threat Research & Secure SDLC

CVS Health; Madison (WI); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance secure development across cloud and on‑prem environments. You will partner with engineering teams to identify risks, implement controls, and strengthen application defenses while mentoring others.

The role emphasizes threat research, secure SDLC practices, and scalable security solutions that protect health data and applications in healthcare platforms. Extensive collaboration across teams is required.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with programming languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell.
• 3+ years securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and assist teams in remediating security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Perform application security assessments, threat modeling, and vulnerability analysis.

Skills

Application security

Threat research

Cloud security

Docker & Kubernetes

Infrastructure as Code

Threat modeling

Vulnerability analysis

Security automation

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CI/CD tooling

Web Application Firewalls

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance secure development across cloud and on‑prem environments. You will partner with engineering teams to identify risks, implement controls, and strengthen application defenses while mentoring others.

The role emphasizes threat research, secure SDLC practices, and scalable security solutions that protect health data and applications in healthcare platforms. Extensive collaboration across teams is required.