Staff Application Security Engineer — Threat Research

CVS Health; Tallahassee (FL); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the software lifecycle, perform threat modeling and vulnerability analysis, and mentor teams on secure development practices.

You will collaborate with software engineers, architects, and platform teams to design scalable security controls, evaluate emerging threats, and drive security improvements across multiple

Qualifications

• 7+ years in application security, info security, software engineering, or related roles.
• 5+ years in one or more programming or scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with containers (Docker, Kubernetes).
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and enforce application security standards, policies, and best practices.
• Partner with engineering to embed security into design, development, testing, and deployment.
• Promote secure coding and remediate findings; contribute to security automation efforts.
• Conduct threat research, vulnerability analysis, and threat modeling; provide actionable recommendations.
• Design and manage security controls across cloud and enterprise environments; support vulnerability management.
• Mentor engineers, share knowledge, and drive security awareness and continuous improvement.

Skills

Application security

Threat research

Secure SDLC

Cloud security

Security automation

Threat modeling

Education

Bachelor's degree

Tools

Docker

Kubernetes

CloudFormation

Terraform

CI/CD pipelines

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the software lifecycle, perform threat modeling and vulnerability analysis, and mentor teams on secure development practices.

You will collaborate with software engineers, architects, and platform teams to design scalable security controls, evaluate emerging threats, and drive security improvements across multiple