Senior Security Engineer

CVS Health

Senior Security Engineer conducting threat hunts and detection engineering for CVS Health’s cyber defense organization. Analyzing security telemetry to uncover threats and strengthen healthcare security.

Posted 8/19/2026full-timeRemote • Texas • 🇺🇸 United StatesSenior💰 $92,700 - $185,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat hunting and detection engineering, utilizing frameworks like MITRE ATT&CK and tools such as SIEM and EDR for effective incident response and security posture enhancement. Proficient in data analysis and automation through scripting and query languages, with a strong understanding of networking and cloud environments.

Highest-signal resume keywords

Threat HuntingDetection EngineeringIncident ResponseSIEM PlatformsPython Scripting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat HuntingDetection EngineeringIncident ResponseKQLSPLYARA-LPython ScriptingNetworkingWindows Operating SystemLinux Operating System

Tools & Technologies

SIEMChronicleGCP SecOpsSplunkCrowdStrikeAWSGCPAzureDatabricksNiFi

Certifications & Qualifications

GCFAGNFAGCTIOSCP

Industry Keywords

MITRE ATT&CKNIST 800-53FTC Safeguards RuleSOC AnalysisTTPs

Tech Stack

Tools & technologies

AWSAzureCloudDNSGoogle Cloud PlatformLinuxPythonSplunk

About the role

Key responsibilities & impact

Conduct hypothesis-driven threat hunts across endpoint, network, identity, and cloud telemetry using frameworks such as MITRE ATT&CK
Analyze log and event data from SIEM, EDR, NetFlow, DNS, and cloud audit logs to identify anomalous or malicious activity
Document hunt methodology, findings, and outcomes in a structured, repeatable format
Support incident response investigations through deep-dive analysis when hunts identify confirmed threats
Monitor emerging TTPs, malware families, and threat actor campaigns relevant to the organization’s industry and threat landscape
Collaborate with Detection Engineering, Security Data Analytics, and Incident Response teams
Strengthen the detection engineering program and mature the organization’s overall security posture
Find, document, and operationalize findings across a modern security stack

Requirements

What you’ll need

5+ years of experience in threat hunting, detection engineering, incident response, or SOC analysis
Strong understanding of attacker TTPs and the MITRE ATT&CK framework
Hands-on experience with SIEM platforms such as Chronicle/GCP SecOps and Splunk
Experience with EDR tools such as CrowdStrike
Proficiency in KQL, SPL, YARA-L, or similar query languages
Python scripting proficiency for data analysis and automation
Understanding of networking, Windows/Linux operating systems, and AWS, GCP, or Azure cloud environments
Bachelor’s degree from an accredited university or equivalent work experience
Alternatively, High School Diploma/GED plus 4 years of relevant experience
Preferred: regulated-industry experience and familiarity with NIST 800-53 or FTC Safeguards Rule
Preferred: familiarity with Databricks and NiFi data pipelines
Preferred: relevant certifications such as GCFA, GNFA, GCTI, OSCP, or similar
Preferred: experience contributing to or building detection content/rules

Benefits

Comp & perks

CVS Health bonus, commission or short-term incentive program in addition to base pay
Medical coverage
Dental coverage
Vision coverage
Paid time off
Retirement savings options
Wellness programs
Other resources supporting physical, emotional, and financial well-being
Comprehensive benefits package for full-time colleagues and their families