onsite
Senior Security Engineer - CVS Health
Security Engineer
Senior Security Engineer responsible for designing, implementing, and managing secure applications and infrastructure, driving risk mitigation, threat modeling, and vulnerability remediation across the organization.
About the role
Key Responsibilities
- Design, develop, and deploy secure application architectures and infrastructure solutions that align with industry best practices and regulatory requirements.
- Conduct threat modeling, risk assessments, and vulnerability analyses to identify and remediate security gaps in both new and legacy systems.
- Collaborate with development, operations, and product teams to embed security controls throughout the software development lifecycle.
- Lead incident response activities, including forensic analysis, root cause investigation, and post‑incident remediation.
- Develop and maintain security policies, standards, and guidelines, ensuring continuous improvement and compliance with internal and external mandates.
Requirements
- 5+ years of experience in security engineering, with a strong focus on application and infrastructure security.
- Proficiency in threat modeling, risk assessment frameworks, and vulnerability management tools.
- Hands‑on experience with secure coding practices, penetration testing, and security automation.
- Strong understanding of cloud security (AWS, Azure, or GCP) and container security concepts.
Skills
pythonsqljavanodejsspringawsgcpazure