Staff AppSec Engineer - Threat Research

Koitecc Solutions; Cheyenne (WY); Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits package

Bonus eligibility

Equity award program

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by combining secure development, threat research, and security engineering. You will partner with engineering to mitigate risks across cloud and on-prem environments, embedding security throughout the SDLC and guiding teams on resilient practices.

The role emphasizes threat research, vulnerability analysis, security controls, and mentorship, with a focus on scalable solutions and

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years with programming languages such as Java, Python, JavaScript, C#, C/C++.
• 3+ years securing public cloud environments (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, threat modeling, and vulnerability analysis.

Responsibilities

• Implement and support application security standards and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment.
• Promote secure coding and remediate findings.
• Contribute to security automation initiatives for efficiency and scalability.
• Research emerging threats and provide actionable recommendations.
• Design, configure, and support security technologies across cloud and enterprise environments.
• Collaborate with engineers, architects, and security stakeholders.
• Participate in design reviews to ensure security requirements are considered early.
• Lead or mentor and share knowledge through training and documentation.

Skills

Application security

Threat research

Java

Python

JavaScript

C/C++

PowerShell

Education

Bachelor's degree

Tools

Docker

Kubernetes

AWS

Azure

GCP

Terraform

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology by combining secure development, threat research, and security engineering. You will partner with engineering to mitigate risks across cloud and on-prem environments, embedding security throughout the SDLC and guiding teams on resilient practices.

The role emphasizes threat research, vulnerability analysis, security controls, and mentorship, with a focus on scalable solutions and