Staff Application Security Engineer — Threat Research

Koitecc Solutions; Columbia (SC); Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Paid time off

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on-prem environments. You will collaborate with engineering teams to embed security into the SDLC, perform threat modeling, and lead security architecture efforts while driving scalable security solutions.

You will mentor engineers, contribute to security automation, and influence security practices across multiple teams.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with programming/scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, Shell).
• 3+ years of experience securing public cloud environments (AWS, Azure, GCP).
• 3+ years of experience with Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code.
• 3+ years of experience in application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards and best practices.
• Integrate security into design, development, testing, and deployment processes.
• Promote secure coding and remediate findings.
• Contribute to security automation to improve efficiency and scalability.
• Conduct threat research, vulnerability analysis, and threat modeling.
• Architect and support security controls across cloud and enterprise environments.
• Mentor engineers and share security knowledge across teams.
• Participate in incident response and operational security activities.

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on-prem environments. You will collaborate with engineering teams to embed security into the SDLC, perform threat modeling, and lead security architecture efforts while driving scalable security solutions.

You will mentor engineers, contribute to security automation, and influence security practices across multiple teams.