Threat Research: Application Security Engineer

Hispanic Alliance for Career Enhancement; Des Moines (IA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology by combining application security engineering, threat research, and secure development practices. You will partner with engineering teams to identify risks, implement controls, and strengthen defenses across cloud and enterprise environments.

This role focuses on embedding security throughout the software development lifecycle, conducting security assessments, researching emerging

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years programming or scripting experience in Java, Python, JavaScript, C#, C/C++, PowerShell or Shell.

Responsibilities

• Implement and support application security standards, policies, and best practices.
• Partner with engineering teams to integrate security into design, development, testing, and deployment processes.
• Promote secure coding practices and remediate security findings.
• Contribute to security automation initiatives that improve efficiency and scalability.
• Research emerging threats, perform application security assessments, threat modeling, and vulnerability analysis.
• Design, configure, and support security technologies across cloud and enterprise environments.
• Assist with implementation and management of security controls that protect applications, APIs, and data.
• Support vulnerability management and remediation programs.
• Serve as a mentor for engineers and security practitioners.

Skills

Application security experience

Programming languages (Java, Python,/t

Public cloud experience (AWS, Azure, G

Docker & Kubernetes

Infrastructure as Code / Security as

Threat modeling & vulnerability anal

Education

Bachelor's degree

Tools

Web Application Firewalls

API security solutions

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure modern healthcare technology by combining application security engineering, threat research, and secure development practices. You will partner with engineering teams to identify risks, implement controls, and strengthen defenses across cloud and enterprise environments.

This role focuses on embedding security throughout the software development lifecycle, conducting security assessments, researching emerging