Staff Application Security Threat Research Engineer

Koitecc Solutions; Honolulu (HI); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Job summary

CVS Health is hiring a Staff Application Security Engineer - Threat Research to secure health technology by blending security engineering, threat research, and secure SDLC practices. You will partner with engineering teams to embed security into design, development, testing, and deployment across cloud and on-prem environments.

The role focuses on security assessments, threat intelligence, and scalable security solutions, mentoring teams, and driving continuous improvement in the security

Qualifications

• 7+ years in application security, information security, software engineering, or related roles.
• 5+ years with one or more programming languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with container technologies (Docker and Kubernetes).
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and help remediate security findings.
• Contribute to security automation initiatives for efficiency and scalability.
• Research emerging threats, perform threat modeling, and provide actionable recommendations.

Skills

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CloudFormation

Job description

CVS Health is hiring a Staff Application Security Engineer - Threat Research to secure health technology by blending security engineering, threat research, and secure SDLC practices. You will partner with engineering teams to embed security into design, development, testing, and deployment across cloud and on-prem environments.

The role focuses on security assessments, threat intelligence, and scalable security solutions, mentoring teams, and driving continuous improvement in the security