Staff Application Security Engineer: Threat Research

CVS Health; Boston (MA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will drive threat research, secure development, and risk-based security controls with engineering teams.

You will mentor engineers, design scalable security architectures, and communicate findings to both technical and non-technical audiences while enhancing the organization’s security posture.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with one or more programming languages (Java, Python, JavaScript, etc.).
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code.
• 3+ years performing application security assessments and threat modeling.

Responsibilities

• Security Engineering & Secure Development: Implement and support application security standards, policies, and best practices.
• Threat Research & Analysis: Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Security Solutions & Architecture: Design, configure, and support security technologies across cloud and enterprise environments.
• Collaboration & Communication: Work closely with software engineers, architects, platform teams, and security stakeholders.
• Incident Response & Operational Support: Participate in security investigations and incident response activities.
• Mentorship & Knowledge Sharing: Serve as a technical mentor for engineers and application security practitioners.
• Innovation & Continuous Improvement: Evaluate emerging security tools and technologies.

Skills

Application security

Threat modeling

Cloud security

Container tech

DevSecOps

Security automation

Programming languages

Education

Bachelors degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

IaC tools

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will drive threat research, secure development, and risk-based security controls with engineering teams.

You will mentor engineers, design scalable security architectures, and communicate findings to both technical and non-technical audiences while enhancing the organization’s security posture.