Staff Application Security Engineer, Threat Research

Partners in Digital Health; Columbus (OH); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Retirement plan

Paid time off

Wellness program

Equity awards

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and enterprise environments. You will partner with engineering teams to identify and mitigate risks, implement controls, and strengthen defenses while mentoring others and driving security innovation.

You will embed security throughout the software lifecycle, conduct assessments, and research emerging threats, delivering scalable solutions that protect applications

Qualifications

• 7+ years in application security or related roles.
• Experience with one or more programming/scripting languages listed in the job description.
• 3+ years securing public cloud environments and using container technologies.
• Experience with IaC/SecOps and threat modeling.
• Knowledge of security testing methodologies and frameworks.

Responsibilities

• Develop and enforce application security standards and best practices.
• Collaborate with engineering to embed security into design, dev, test, and deployment.
• Lead threat research and vulnerability analysis across cloud and on‑prem environments.
• Drive security automation and scalable security architecture initiatives.
• Communicate findings to technical and non‑technical stakeholders.
• Support incident response and remediation efforts to reduce risk.

Skills

Application security

Threat research

Secure SDLC

Threat modeling

Vulnerability analysis

Incident response

Security automation

Security communication

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

Infrastructure as Code

Security as Code

Web Application Firewall

API security

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and enterprise environments. You will partner with engineering teams to identify and mitigate risks, implement controls, and strengthen defenses while mentoring others and driving security innovation.

You will embed security throughout the software lifecycle, conduct assessments, and research emerging threats, delivering scalable solutions that protect applications