Staff AppSec Engineer: Threat Research & Cloud Defense

Partners in Digital Health; Helena (MT); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is hiring a Staff Application Security Engineer - Threat Research. You will secure healthcare software by integrating security into design, development, testing, and deployment, while performing threat research and architectural security across cloud and enterprise environments.

You will mentor engineers, promote secure coding, and drive scalable security solutions with emphasis on incident response, threat modeling, and security automation to improve overall posture.

Qualifications

• 7+ years in application security or related roles.
• 5+ years with one or more programming languages listed.
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years with Docker and Kubernetes.
• 3+ years with Infrastructure as Code or Security as Code.

Responsibilities

• Develop and implement secure development practices across teams.
• Research threats, conduct vulnerability analyses, and model risks.
• Configure security controls across cloud and on‑prem environments.
• Collaborate with engineers to embed security in design, code, and deployment.
• Lead incident response and security investigations as needed.
• Mentor engineers and share security knowledge across teams.

Skills

Application security

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Cloud platforms

AWS

Azure

GCP

Docker

Kubernetes

Infrastructure as Code

Security as Code

Threat modeling

Threat intelligence

Education

Bachelor's degree

Tools

Terraform

CI/CD pipelines

Job description

CVS Health is hiring a Staff Application Security Engineer - Threat Research. You will secure healthcare software by integrating security into design, development, testing, and deployment, while performing threat research and architectural security across cloud and enterprise environments.

You will mentor engineers, promote secure coding, and drive scalable security solutions with emphasis on incident response, threat modeling, and security automation to improve overall posture.