Staff Application Security Engineer: Threat Research

CVS Health; Oklahoma City (OK); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and enterprise environments. You will embed security across the SDLC, conduct threat modeling, and lead security initiatives with engineering teams to strengthen defenses for applications and data.

The role emphasizes threat research, secure development practices, and collaboration with multiple teams to improve the organization’s overall security posture.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with programming/scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years with Docker/Kubernetes and IaC/SecDevOps.

Responsibilities

• Implement security standards, policies, and best practices.
• Partner with engineering to integrate security into design, development, testing, and deployment.
• Promote secure coding and remediate findings.
• Contribute to security automation to improve efficiency and scale.
• Perform threat research, security assessments, threat modeling, and vulnerability analysis.
• Evaluate risks and provide actionable recommendations to teams.
• Design and support security controls across cloud and enterprise environments.
• Lead communications with engineers and security stakeholders.
• Support incident response and operational security activities.
• Mentor engineers and share knowledge to foster security culture.

Skills

Application security

Threat research

Secure development practices

Cloud security (AWS/Azure/GCP)

Container security (Docker/Kubernetes)

Security assessments & threat modeling

Security automation & DevSecOps

Mentorship & collaboration

Education

Bachelor's degree

Tools

Docker

Kubernetes

Cloud platforms (AWS/Azure/GCP)

Infrastructure as Code

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology across cloud and enterprise environments. You will embed security across the SDLC, conduct threat modeling, and lead security initiatives with engineering teams to strengthen defenses for applications and data.

The role emphasizes threat research, secure development practices, and collaboration with multiple teams to improve the organization’s overall security posture.