Staff Application Security Engineer, Threat Research

Koitecc Solutions; Olympia (WA); Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid time off

Retirement savings options

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare tech by combining secure development, threat research, and security engineering. You will partner with engineering teams to identify risks, implement controls, and strengthen defenses across cloud and enterprise environments.

You will embed security across the development lifecycle, perform assessments, research threats, and build scalable security solutions.

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years of experience with programming languages (Java, Python, JavaScript, C#, C/C++, PowerShell).
• 3+ years securing public cloud environments (AWS, Azure, GCP).
• 3+ years container technologies (Docker, Kubernetes).
• 3+ years IaC / Security as Code practices.
• 3+ years performing security assessments, threat modeling, and vulnerability analysis.

Responsibilities

• Embed security into the software development lifecycle.
• Conduct security assessments, threat modeling, and vulnerability analysis.
• Design, configure, and manage security controls across cloud and on-prem environments.
• Collaborate with engineers to remediate findings and improve security posture.
• Lead incident response activities and operational security tasks.
• Mentor engineers and share knowledge to uplift security practices.

Skills

AppSec experience

Threat research

Secure SDLC

Cloud security

Container security

Programming languages

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CI/CD

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare tech by combining secure development, threat research, and security engineering. You will partner with engineering teams to identify risks, implement controls, and strengthen defenses across cloud and enterprise environments.

You will embed security across the development lifecycle, perform assessments, research threats, and build scalable security solutions.