Staff Application Security Engineer — Threat Research & Cloud

CVS Health; Cheyenne (WY); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health in the United States is seeking a Staff Application Security Engineer - Threat Research to help secure healthcare technology across cloud and enterprise environments. You will embed security into the software development lifecycle and lead threat research and vulnerability assessments.

You will partner with engineering teams, promote secure coding practices, and contribute to scalable security architectures while mentoring engineers and shaping security awareness.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years of experience securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years of experience with container technologies including Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: Implement and support application security standards, policies, and best practices.
• Threat Research & Analysis: Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Security Solutions & Architecture: Design, configure, and support security technologies across cloud and enterprise environments.
• Collaboration & Communication: Work closely with software engineers, architects, platform teams, and security stakeholders.
• Incident Response & Operational Support: Participate in security investigations and incident response activities as needed.
• Mentorship & Knowledge Sharing: Serve as a technical mentor for engineers and application security practitioners.
• Innovation & Continuous Improvement: Evaluate emerging security tools and technologies.

Skills

7+ years experience in application &信息

Programming languages

Cloud security

Container technologies

IaC/Security as Code

Threat modeling & assessments

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health in the United States is seeking a Staff Application Security Engineer - Threat Research to help secure healthcare technology across cloud and enterprise environments. You will embed security into the software development lifecycle and lead threat research and vulnerability assessments.

You will partner with engineering teams, promote secure coding practices, and contribute to scalable security architectures while mentoring engineers and shaping security awareness.