Staff Application Security Threat Research Engineer

Koitecc Solutions; Atlanta (GA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance secure software across cloud and enterprise environments. You will embed security in the SDLC, perform threat modeling, and lead security controls adoption with engineering teams.

You will mentor teams, drive security automation, and influence architectural decisions while expanding the organization's security posture in healthcare technology.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years of experience securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years of experience with container technologies including Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: implement and support application security standards and integrate security into design, development, testing, and deployment.
• Threat Research & Analysis: research threats, perform assessments, threat modeling, and provide actionable recommendations.
• Security Solutions & Architecture: design and manage security controls across cloud and enterprise environments.
• Collaboration & Communication: work with engineers and security stakeholders and communicate findings.
• Incident Response & Operational Support: participate in security investigations and remediation activities.
• Mentorship & Knowledge Sharing: mentor engineers and share knowledge through trainings and documentation.
• Innovation & Continuous Improvement: evaluate tools and contribute to security research initiatives.

Skills

Application security

Threat modeling

Security engineering

Cloud security

Java

Python

JavaScript

C/C++

PowerShell

Shell scripting

Docker

Kubernetes

Terraform

CI/CD security

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CI/CD tools

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to advance secure software across cloud and enterprise environments. You will embed security in the SDLC, perform threat modeling, and lead security controls adoption with engineering teams.

You will mentor teams, drive security automation, and influence architectural decisions while expanding the organization's security posture in healthcare technology.