Threat Research & Application Security Engineer

Hispanic Alliance for Career Enhancement; Lincoln (NE); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software by combining secure development, threat research, and security engineering. You will collaborate with engineering teams to embed security across the full software lifecycle and strengthen defenses in cloud and on‑prem environments.

You will research threats, conduct assessments, and build scalable security solutions while mentoring teams and advancing a culture of security awareness across

Qualifications

• 7+ years of experience in application security or related roles.
• 5+ years of programming or scripting in Java, Python, JavaScript, C#, C/C++, PowerShell, or Shell scripting.
• 3+ years securing public cloud environments (AWS/Azure/GCP).
• 3+ years with container technologies (Docker, Kubernetes).
• 3+ years with Infrastructure as Code or Security as Code practices.
• 3+ years performing application security assessments, vulnerability analysis, and threat modeling.

Responsibilities

• Security Engineering & Secure Development: implement and support standards, policies, and best practices; partner with engineering to integrate security into design, development, testing and deployment.
• Threat Research & Analysis: research threats, perform threat modeling and vulnerability analysis; provide actionable recommendations.
• Security Solutions & Architecture: design and support security controls across cloud and enterprise environments; manage vulnerability programs.
• Collaboration & Communication: work with engineers, architects, platform teams and stakeholders; communicate findings to technical and non-technical audiences.
• Incident Response & Operational Support: participate in investigations and support security operations.
• Mentorship & Knowledge Sharing: mentor engineers, share training and documentation; foster security awareness.
• Innovation & Continuous Improvement: evaluate tools, contribute to R&D and POC efforts, drive process improvements.

Skills

Application security

Java

Python

JavaScript

C#

C/C++

PowerShell

Shell scripting

Cloud security

Docker

Kubernetes

Infrastructure as Code

Threat modeling

Vulnerability analysis

Education

Bachelor's degree

Job description

CVS Health is seeking a Staff Application Security Engineer - Threat Research to secure healthcare software by combining secure development, threat research, and security engineering. You will collaborate with engineering teams to embed security across the full software lifecycle and strengthen defenses in cloud and on‑prem environments.

You will research threats, conduct assessments, and build scalable security solutions while mentoring teams and advancing a culture of security awareness across