Staff Application Security Engineer, Threat Research

Partners in Digital Health; Columbia (SC); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is hiring a Staff Application Security Engineer - Threat Research to secure healthcare technology across cloud and enterprise environments. You will collaborate with engineering to embed security in the lifecycle, perform assessments, threat modeling, and build scalable security solutions while mentoring teams.

The role emphasizes threat research, secure coding practices, and automation to improve efficiency and resilience.

Qualifications

• Minimum 7+ years in application security or related roles.
• Strong programming/scripting experience with Java, Python, JavaScript, C#, C/C++, PowerShell or Shell.
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years with Docker and Kubernetes in production.
• Experience with Infrastructure as Code or Security as Code.
• Experience performing security assessments, threat modeling, and vulnerability analysis.

Responsibilities

• Implement and promote secure development standards and practices.
• Partner with engineering to embed security into design, development, testing, and deployment.
• Conduct security assessments, threat modeling, and vulnerability analysis.
• Research emerging threats and enhance threat intelligence for controls and detection.
• Design and support security technologies across cloud and on‑prem environments.
• Mentor engineers and share knowledge to raise overall security posture.
• Communicate findings clearly to technical and non‑technical audiences.

Skills

Application security

Threat research

Secure SDLC

Cloud security

Docker/Kubernetes

Security as Code

Threat modeling

Communication skills

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

CI/CD tooling

Job description

CVS Health is hiring a Staff Application Security Engineer - Threat Research to secure healthcare technology across cloud and enterprise environments. You will collaborate with engineering to embed security in the lifecycle, perform assessments, threat modeling, and build scalable security solutions while mentoring teams.

The role emphasizes threat research, secure coding practices, and automation to improve efficiency and resilience.