Staff Application Security Engineer – Blue Team

Job not on LinkedIn

🔥 13 hours ago

🏄 California – Remote

🏄 California – Remote

💵 $130.3k - $260.6k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CVS Health

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1963

🏥 Healthcare

⚕️ Healthcare Insurance

🛒 Retail

Healthcare • Healthcare Insurance • Retail

CVS Health is a leading American healthcare company dedicated to improving health access and affordability. The company focuses on a comprehensive approach that includes health services, health insurance, and pharmacy benefits management. Through its subsidiaries, such as Aetna and CVS Caremark, CVS Health offers a range of services that facilitate wellness, condition management, and affordable prescription drug coverage. CVS Health operates neighborhood pharmacies, provides mail-order pharmacy services, and manages specialty medication programs, aiming to make healthcare convenient and accessible for everyone. Driven by a mission to connect people with essential care services, CVS Health is committed to fostering healthier communities and supporting the wellbeing of all individuals.

📋 Description

• Design, implement, and maintain defensive security controls across applications, cloud platforms, data systems, and network environments • Develop and enforce enterprise-wide application and data security standards, policies, and best practices • Embed security controls into SDLC processes, CI/CD pipelines, and deployment automation frameworks • Lead security architecture reviews and establish security governance frameworks • Partner with Engineering, Infrastructure, Architecture, and Business teams on secure-by-design practices • Serve as a trusted advisor and technical leader for Application Security, Cloud Security, and Secure Development • Monitor, detect, investigate, and respond to security events, vulnerabilities, threats, and incidents • Lead vulnerability assessments, remediation planning, risk prioritization, and validation • Conduct security assessments, threat modeling, and architecture reviews • Implement advanced security solutions across multi-cloud, colocation, and enterprise environments • Participate in a rotational 24x7 on-call schedule, including off-hours, nights, weekends, and holidays • Lead incident response activities including investigation, containment, eradication, recovery, and post-incident reviews • Develop and improve incident response, detection, escalation, and recovery playbooks • Mentor and coach engineers on secure coding, security engineering, and defensive operations • Research emerging threats, vulnerabilities, attack techniques, and security technologies • Evaluate and recommend security tools, platforms, and defensive capabilities • Automate security operations using code and Security-as-Code principles • Contribute to long-term security strategy, architecture roadmaps, technology planning, and enterprise security objectives • Partner with leadership to prioritize security investments and risk reduction activities

🎯 Requirements

• 7+ years of experience in security engineering, application security, cloud security, or defensive security operations • 3+ years of experience securing AWS, Azure, and GCP cloud platforms • 3+ years of experience with Docker, Kubernetes, Infrastructure-as-Code, and Security-as-Code methodologies • 3+ years of experience with programming or scripting languages such as Python, Java, C#, JavaScript, Shell, or PowerShell • 3+ years of experience in networking, identity management, authentication, authorization, and threat mitigation techniques • Experience designing and operating defensive security controls in cloud-native, containerized, and distributed application environments • Experience with data protection controls and regulatory/compliance requirements including GDPR, CCPA, or similar frameworks • Experience designing and implementing enterprise-scale security controls and automation solutions • Understanding of networking, SDN, zero-trust architectures, and cloud security models • Experience with threat modeling, security architecture reviews, and secure design assessments • Ability to develop and interpret network, sequence, application architecture, and data flow diagrams • Experience with security and compliance frameworks such as NIST, PCI DSS, HIPAA, HITRUST, ISO 27001, SOC 2, or CSA • Experience securing enterprise data platforms, analytics environments, and data warehouses including Snowflake or similar technologies • Experience defining and implementing cyber resilience, business continuity, backup, redundancy, and recovery strategies • Relevant industry certifications such as CISSP, CCSP, GSEC, GIAC, AWS Security Specialty, Azure Security Engineer Associate, or equivalent • Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience (High School Diploma/GED plus 4 years of related experience)

🏖️ Benefits

• Medical coverage • Dental coverage • Vision coverage • Paid time off • Retirement savings options • Wellness programs • Other resources supporting physical, emotional, and financial well-being • CVS Health bonus, commission or short-term incentive program • Equity award program