Staff Application Security Engineer — Threat Research

Partners in Digital Health; Topeka (KS); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Competitive benefits package

Paid time off

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology across cloud and on-prem environments. You will drive secure development, threat research, and scalable security solutions while mentoring teams and influencing security practices across multiple groups.

The role focuses on embedding security into the software lifecycle, conducting assessments, and designing resilient architectures to protect sensitive healthcare data and applications.

Qualifications

• 7+ years in application security or related roles.
• 5+ years programming/scripting (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years with Docker/Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code.
• 3+ years in app security assessments, threat modeling, vulnerability analysis.

Responsibilities

• Implement and support application security standards and policies.
• Partner with engineering to integrate security into design, development, testing, and deployment.
• Promote secure coding practices and remediate findings.
• Contribute to security automation initiatives for efficiency and scale.
• Research emerging threats and vulnerabilities; perform threat modeling.
• Evaluate risks and provide actionable recommendations to teams.
• Design and manage security controls across cloud and on-prem environments.
• Support vulnerability management and remediation programs.
• Mentor engineers and share security knowledge.

Skills

Security engineering

Threat research

Secure development

Collaboration & communication

Mentorship

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology across cloud and on-prem environments. You will drive secure development, threat research, and scalable security solutions while mentoring teams and influencing security practices across multiple groups.

The role focuses on embedding security into the software lifecycle, conducting assessments, and designing resilient architectures to protect sensitive healthcare data and applications.