Staff Application Security Engineer

CVS Health

Staff Application Security Engineer developing and enforcing security policies at CVS Health. Collaborating across teams to ensure application security and compliance with industry regulations.

Posted 4/15/2026full-timeRemote • Connecticut, New York, Rhode Island • 🇺🇸 United StatesLead💰 $130,295 - $284,280 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudDockerGoogle Cloud PlatformJavaJavaScriptKubernetesPython

About the role

Key responsibilities & impact

Develop and enforce engineering security policies and standards
Collaborate with Engineering and Business teams to develop secure engineering practices
Analyze, develop, and configure security solutions across multi-cloud, on-premises, and colocation environments
Participate in operational on-call duties to support a 24/7 infrastructure
Develop a comprehensive mentorship program for junior engineers
Participate in security research and explore next-generation security tools and practices
Conduct thorough risk assessments and align long-term security strategies with business goals

Requirements

What you’ll need

7+ years of experience in developing and deploying security technologies
5+ years of experience with implementing and managing data protection measures and compliance with data protection regulations (e.g., GDPR, CCPA)
5+ years of experience in Public Cloud (AWS/Azure/GCP) and Network Security
3+ years of experience with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code
3+ years of experience with one or more general-purpose programming/script languages including but not limited to: Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell

Benefits

Comp & perks

medical, dental, and vision coverage
paid time off
retirement savings options
wellness programs
other resources, based on eligibility

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security technologiesdata protection measurescompliancePublic CloudNetwork SecurityDockerKubernetesSecurity-as-CodeInfrastructure-as-Codeprogramming languages

Soft Skills

collaborationmentorshiprisk assessmentcommunication