Staff Application Security Engineer: Threat Research

CVS Health; Santa Fe (NM); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Paid time off

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to strengthen security across cloud and enterprise healthcare environments. You will partner with engineering teams to embed security into design, development, and deployment, conducting threat research, threat modeling, and vulnerability analyses to protect applications and data.

You will mentor engineers, contribute to security automation, and influence security practices across multiple teams while advancing

Qualifications

• 7+ years in application security or related roles.
• 5+ years with programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell.
• 3+ years securing public cloud environments (AWS, Azure, or Google Cloud).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and remediate security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Design, configure, and support security technologies across cloud and enterprise environments.
• Collaborate with software engineers, architects, platform teams, and security stakeholders.
• Participate in design reviews to ensure security requirements are incorporated early in the development lifecycle.

Skills

App security

Threat research

Threat modeling

Security assessments

Cloud security

Docker/Kubernetes

DevSecOps

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Docker

Kubernetes

IaC

Security as Code

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to strengthen security across cloud and enterprise healthcare environments. You will partner with engineering teams to embed security into design, development, and deployment, conducting threat research, threat modeling, and vulnerability analyses to protect applications and data.

You will mentor engineers, contribute to security automation, and influence security practices across multiple teams while advancing