Staff AppSec Engineer: Threat Research & Cloud Security

Koitecc Solutions; Phoenix (AZ); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will embed security in the SDLC, perform threat modeling, and drive secure coding practices while partnering with engineering teams.

Responsibilities include risk assessments, security automation, incident response support, and mentoring engineers to strengthen the organization’s security posture.

Qualifications

• 7+ years of experience in application security, information security, software engineering, or related roles.
• 5+ years of experience with one or more programming or scripting languages such as Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years of experience securing public cloud environments including AWS, Azure, or Google Cloud Platform.
• 3+ years of experience with container technologies including Docker and Kubernetes.
• 3+ years of experience with Infrastructure as Code or Security as Code practices.
• 3+ years of experience performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: Implement and support application security standards, policies, and best practices.
• Threat Research & Analysis: Research emerging threats, vulnerabilities, attack techniques, and security trends.
• Security Solutions & Architecture: Design, configure, and support security technologies across cloud and enterprise environments.
• Collaboration & Communication: Work with engineers, architects, and security stakeholders; communicate findings clearly.
• Incident Response & Operational Support: Participate in security investigations and remediation activities.
• Mentorship & Knowledge Sharing: Mentor engineers and share knowledge through trainings and docs.
• Innovation & Continuous Improvement: Evaluate new security tools and contribute to process improvements.

Skills

Application security

Programming languages

Cloud security

Docker

Kubernetes

Threat modeling

Education

Bachelor's degree

Tools

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and on‑prem environments. You will embed security in the SDLC, perform threat modeling, and drive secure coding practices while partnering with engineering teams.

Responsibilities include risk assessments, security automation, incident response support, and mentoring engineers to strengthen the organization’s security posture.