Staff Application Security Engineer — Threat Research & Cloud Security

Hispanic Alliance for Career Enhancement; Montpelier (VT); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid Time Off

Bonus & equity eligibility

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will drive secure development, perform threat modeling, and collaborate with engineering teams to mitigate risks and implement robust security controls.

You will mentor engineers, advance security automation, and explore emerging threats to strengthen our security posture while contributing to initiatives that protect patient data and ensure

Qualifications

• 7+ years of experience in application security or related fields.
• 5+ years programming in Java, Python, JavaScript, C#, or C/C++.
• 3+ years securing public cloud (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years IaC or Security as Code practices.
• 3+ years performing security assessments and threat modeling.

Responsibilities

• Implement and support application security standards and practices.
• Integrate security into design, development, testing, and deployment.
• Remediate security findings and promote secure coding.
• Contribute to security automation to improve efficiency.
• Conduct threat research, modeling, and vulnerability analysis.
• Design and manage security controls across cloud and enterprise.
• Collaborate with engineers and security stakeholders.
• Lead incident response and operational security tasks.
• Mentor engineers and share knowledge.
• Evaluate emerging security tools and initiatives.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Docker

Kubernetes

Infrastructure as Code

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will drive secure development, perform threat modeling, and collaborate with engineering teams to mitigate risks and implement robust security controls.

You will mentor engineers, advance security automation, and explore emerging threats to strengthen our security posture while contributing to initiatives that protect patient data and ensure