Staff Threat Research & Application Security Engineer

Hispanic Alliance for Career Enhancement; Oklahoma City (OK); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology across cloud and enterprise environments. You will embed security in the software development lifecycle, conduct assessments, research threats, and build scalable security solutions while mentoring teams.

You will partner with software engineers, architects, and security stakeholders to drive secure design reviews and incident response activities.

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years of experience with programming/scripting languages (Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell).
• 3+ years securing public cloud environments (AWS, Azure, GCP).
• 3+ years with container technologies (Docker, Kubernetes).
• 3+ years with Infrastructure as Code or Security as Code.
• 3+ years of application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Implement and support application security standards, policies and best practices.
• Partner with engineering to integrate security into design, development, testing, and deployment.
• Promote secure coding and remediate findings.
• Contribute to security automation for efficiency and scale.
• Perform threat research, assessments, and vulnerability analysis.
• Design and support security controls across cloud and enterprise environments.

Skills

Application security

Threat research

Cloud security

Docker

Kubernetes

IaC/Security as Code

Threat modeling

Vulnerability analysis

Security assessments

Programming languages

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CI/CD pipelines

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare technology across cloud and enterprise environments. You will embed security in the software development lifecycle, conduct assessments, research threats, and build scalable security solutions while mentoring teams.

You will partner with software engineers, architects, and security stakeholders to drive secure design reviews and incident response activities.