Staff Application Security Engineer: Threat Research

Hispanic Alliance for Career Enhancement; Topeka (KS); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software and strengthen defenses across cloud and on-prem environments. You will lead threat research, security assessments, and secure development practices while partnering with engineering teams and mentoring staff.

You will influence security across multiple teams, drive risk-based decisions, and help design scalable security architectures.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years of experience securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years of experience with container technologies including Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and assist teams in remediating security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Perform application security assessments, threat modeling, and vulnerability analysis.
• Evaluate risks and provide actionable recommendations to engineering teams.
• Leverage threat intelligence to enhance application security controls and detection capabilities.
• Design, configure, and support security technologies across cloud and enterprise environments.
• Assist with implementation and management of security controls that protect applications, APIs, and data.
• Support vulnerability management and remediation programs.
• Contribute to the development of scalable and resilient security architectures.
• Work closely with software engineers, architects, platform teams, and security stakeholders.
• Participate in design reviews to ensure security requirements are incorporated early in the development lifecycle.
• Communicate technical security findings to both technical and non-technical audiences.
• Participate in security investigations and incident response activities as needed.
• Support operational security functions across cloud and enterprise environments.
• Assist in identifying root causes and implementing long-term remediation strategies.
• Serve as a technical mentor for engineers and application security practitioners.
• Share knowledge through training sessions, presentations, and documentation.
• Contribute to building a culture of security awareness and continuous learning.
• Evaluate emerging security tools and technologies.
• Contribute to security research initiatives and proof-of-concept efforts.
• Recommend process improvements that strengthen the effectiveness of application security programs.

Skills

Application security

Threat modeling

Security assessments

Cloud security

DevSecOps

Python

Java

JavaScript

C/C++

PowerShell

Education

Bachelor's degree in a relevant field

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare software and strengthen defenses across cloud and on-prem environments. You will lead threat research, security assessments, and secure development practices while partnering with engineering teams and mentoring staff.

You will influence security across multiple teams, drive risk-based decisions, and help design scalable security architectures.