Staff Threat Research & Application Security Engineer

Stryker Corporation; Dover (DE); On-site; Confidential; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings plan

Wellness programs

Equity award program

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the SDLC, perform threat modeling, and lead security assessments while mentoring teams and driving scalable defenses.

You will collaborate with software engineers, architects, and security stakeholders to design and implement security controls, monitor threats, and improve the organization’s overall security posture.

Qualifications

• 7+ years in application security, information security, or related roles.
• 5+ years with Java, Python, JavaScript, C#, C/C++, PowerShell or Shell scripting.
• 3+ years securing public cloud (AWS, Azure, or GCP).
• 3+ years with Docker and Kubernetes; 3+ years IaC or Security as Code.
• 3+ years performing security assessments, threat modeling, and vulnerability analysis.

Responsibilities

• Implement and support application security standards, policies and best practices.
• Partner with engineering to integrate security into design, development, testing and deployment.
• Promote secure coding and remediate findings; contribute to security automation.
• Design, configure and support security technologies across cloud and on‑premise environments.
• Collaborate with engineers and stakeholders; communicate findings clearly.
• Participate in incident response and operational security activities.
• Mentor engineers and share knowledge; drive continuous security improvement.

Skills

Application security

Threat research

Cloud security

Docker & Kubernetes

Infrastructure as Code

Threat modeling

Secure SDLC

Security automation

Programming languages

Education

Bachelor's degree or equivalent

Tools

Docker

Kubernetes

Security tooling

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software across cloud and enterprise environments. You will embed security into the SDLC, perform threat modeling, and lead security assessments while mentoring teams and driving scalable defenses.

You will collaborate with software engineers, architects, and security stakeholders to design and implement security controls, monitor threats, and improve the organization’s overall security posture.