Staff Application Security Engineer, Threat Research

Partners in Digital Health; Jackson (MS); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision coverage

Paid time off

Retirement plan

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to strengthen security across healthcare software, cloud and enterprise environments. You will partner with engineering teams to embed security in the SDLC, perform threat modeling, and drive scalable security solutions that protect applications and data.

You will mentor engineers, lead security assessments, and contribute to security automation initiatives while communicating complex findings to both technical and

Qualifications

• 7+ years in application security or related roles.
• Experience with secure development lifecycle and threat modeling.
• Experience securing cloud environments (AWS, Azure, GCP).
• Proficient with container tech (Docker/Kubernetes).
• Familiarity with security automation and tooling.

Responsibilities

• Implement and support application security standards and best practices.
• Integrate security into design, development, testing, and deployment.
• Conduct threat research, assessments, and vulnerability analysis.
• Design and manage security controls across cloud and on-prem environments.
• Mentor engineers and share security knowledge.

Skills

Application security

Threat research

Secure SDLC

Mentorship

Communication

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS/Azure/GCP

Infrastructure as Code

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to strengthen security across healthcare software, cloud and enterprise environments. You will partner with engineering teams to embed security in the SDLC, perform threat modeling, and drive scalable security solutions that protect applications and data.

You will mentor engineers, lead security assessments, and contribute to security automation initiatives while communicating complex findings to both technical and