Staff Application Security Engineer: Threat Research

Partners in Digital Health; Sacramento (CA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology by combining application security engineering with threat research and secure development practices. You will partner with engineering teams to identify risks, implement controls, and strengthen defenses across cloud and enterprise environments.

The role focuses on embedding security across the SDLC, conducting security assessments, researching emerging threats, and building

Qualifications

• 7+ years in application security or related roles.
• 5+ years in programming or scripting (Java, Python, JavaScript, C#, C/C++, PowerShell or Shell).
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security engineering and secure development across design, development, testing, and deployment.
• Threat research, vulnerability analysis, and threat modeling.
• Design, configure, and support security technologies across cloud and on-prem environments.
• Collaborate with engineers and stakeholders; communicate findings clearly.
• Mentor engineers and promote security best practices.
• Contribute to security automation and scalable architectures.

Skills

Application security

Threat research

Cloud security

Docker

Kubernetes

Threat modeling

Secure coding

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Terraform

WAF

API security

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology by combining application security engineering with threat research and secure development practices. You will partner with engineering teams to identify risks, implement controls, and strengthen defenses across cloud and enterprise environments.

The role focuses on embedding security across the SDLC, conducting security assessments, researching emerging threats, and building