Staff Application Security Engineer — Threat Research

CVS Health; Boise (ID); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will blend security engineering, threat research, and secure development practices to help teams build safer systems.

You will mentor engineers, perform risk assessments, and improve security controls while influencing design reviews and secure coding practices across multiple teams.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with one or more programming/scripting languages.
• 3+ years in public cloud (AWS/Azure/GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years Infrastructure as Code / Security as Code.
• 3+ years of application security assessments and threat modeling.

Responsibilities

• Embed security into the software development lifecycle.
• Conduct threat research, vulnerability analysis, and risk assessments.
• Design and implement security controls across cloud and on-prem environments.
• Mentor engineers and communicate findings to technical and non-technical audiences.
• Lead security reviews and drive secure coding practices.

Skills

Application security

Threat modeling

Java

Python

JavaScript

C#

C/C++

PowerShell

Docker

Kubernetes

AWS

Azure

GCP

Infrastructure as Code

Security as Code

Threat research

Vulnerability analysis

Incident response

Education

Bachelor's degree

Tools

Web Application Firewalls

API security

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will blend security engineering, threat research, and secure development practices to help teams build safer systems.

You will mentor engineers, perform risk assessments, and improve security controls while influencing design reviews and secure coding practices across multiple teams.