Staff Application Security Engineer: Threat Research

Koitecc Solutions; Jefferson City (MO); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement savings options

Paid time off

Wellness programs

Equity awards

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software across cloud and on‑prem environments. You will integrate security into design, development, testing, and deployment while partnering with engineering teams to identify risks and implement controls.

In this hands‑on role you will perform threat modeling, security assessments, and vulnerability analysis; mentor engineers; contribute to scalable security architectures; and help

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with programming/scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years of experience securing public cloud environments (AWS, Azure, GCP).
• 3+ years of experience with container technologies (Docker, Kubernetes).
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment.
• Promote secure coding practices and remediate findings.
• Contribute to security automation initiatives for efficiency and scalability.
• Research emerging threats and perform security assessments and threat modeling.
• Evaluate risks and provide actionable recommendations to engineering teams.
• Design and support security controls across cloud and enterprise environments.
• Assist vulnerability management and remediation programs.
• Mentor engineers and share knowledge through trainings and docs.

Skills

Application security

Threat research

Secure SDLC

Cloud security

Threat modeling

Security assessments

Mentoring

Communication

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

Terraform

CI/CD

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software across cloud and on‑prem environments. You will integrate security into design, development, testing, and deployment while partnering with engineering teams to identify risks and implement controls.

In this hands‑on role you will perform threat modeling, security assessments, and vulnerability analysis; mentor engineers; contribute to scalable security architectures; and help