Staff Application Security Engineer: Threat Research

CVS Health; Salem (OR); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement savings options

Paid time off

Job summary

CVS Health in the United States is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by combining application security engineering, threat research, and secure development.

You will partner with engineering teams, conduct assessments, model threats, and design scalable security controls across cloud and enterprise, mentoring colleagues and driving continuous improvement while focusing on security across the SDLC.

Qualifications

• 7+ years in application security or related roles.
• 5+ years in programming or scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, Shell).
• 3+ years securing public cloud (AWS/Azure/GCP).
• 3+ years with containers (Docker, Kubernetes).
• 3+ years with IaC or Security as Code practices.
• 3+ years with app security assessments and threat modeling.

Responsibilities

• Implement and support application security standards and best practices.
• Partner with engineering to embed security into design, development, testing and deployment.
• Promote secure coding and remediate findings.
• Contribute to security automation for scalability.
• Research threats, perform assessments, model threats and provide actionable guidance.
• Design, configure and support security controls across cloud and enterprise.
• Collaborate with engineers, architects and security stakeholders.
• Mentor engineers and share knowledge through training and documentation.

Skills

Application security

Threat research

Cloud security

DevSecOps

Threat modeling

Security assessments

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CloudFormation

Job description

CVS Health in the United States is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by combining application security engineering, threat research, and secure development.

You will partner with engineering teams, conduct assessments, model threats, and design scalable security controls across cloud and enterprise, mentoring colleagues and driving continuous improvement while focusing on security across the SDLC.