Staff AppSec Engineer: Threat Research & Cloud

Partners in Digital Health; Washington (District of Columbia); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will drive secure development, perform threat modeling, and mentor engineers while partnering with product teams.

You'll influence security practices, design scalable controls, conduct assessments, research new threats, and promote automation to protect applications and data in a fast‑paced, patient‑focused health tech landscape.

Qualifications

• Bachelor's degree from an accredited college or university, or equivalent combination of education and relevant work experience.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Integrate security into design, development, testing, and deployment processes.
• Promote secure coding and remediate security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Perform threat modeling and vulnerability analysis.
• Collaborate with engineers to strengthen controls across cloud and enterprise.

Skills

Application security

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

AWS

Azure

GCP

Docker

Kubernetes

IaC

Security as Code

Threat modeling

Vulnerability analysis

Security assessments

Education

Bachelor's degree

Tools

Web Application Firewall (WAF)

API security solutions

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will drive secure development, perform threat modeling, and mentor engineers while partnering with product teams.

You'll influence security practices, design scalable controls, conduct assessments, research new threats, and promote automation to protect applications and data in a fast‑paced, patient‑focused health tech landscape.