Staff Application Security Engineer - Threat Research

CVS Health; Annapolis (MD); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance secure software development across cloud and enterprise environments. You will partner with engineering teams to embed security early in the SDLC, conduct threat modeling, and drive scalable security solutions that protect applications and healthcare data.

The role emphasizes collaboration, mentorship, and delivering actionable security guidance while evolving the organization’s security posture through

Qualifications

• 7+ years in application security, information security, software engineering, or related roles.
• 5+ years with programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years with container technologies including Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: implement standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and remediate findings.
• Contribute to security automation initiatives for scalability.
• Threat Research & Analysis: research emerging threats, perform assessments, threat modeling, and vulnerability analysis.
• Security Solutions & Architecture: design and manage security technologies across cloud and on‑prem environments.
• Collaboration & Communication: work with engineers, architects, and security stakeholders to communicate findings.

Skills

Application security

Threat research

Secure development

Threat modeling

Cloud security

Container security

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance secure software development across cloud and enterprise environments. You will partner with engineering teams to embed security early in the SDLC, conduct threat modeling, and drive scalable security solutions that protect applications and healthcare data.

The role emphasizes collaboration, mentorship, and delivering actionable security guidance while evolving the organization’s security posture through