Distinguished Engineer - Application Security Engineering, CVS Health

CVS Health

Location:

United States, Hartford

Category:

IT - Software Development

Contract Type:

Employment contract

Salary:

175100.00 - 334750.00 USD / Year

Save Job

Apply Position

Job Description:

Profoundly technical thought leader in application design, development, and security concepts. In this leader role, the individual will implement secure, reliable systems at scale, establish security best practices, and mentor junior engineers while driving cutting-edge security solutions. The position requires proficiency in multi-cloud environments, application and network security, and architecture technologies such as containerization, serverless, and older stacks like mainframes.

Job Responsibility:

Define application security coding, design, development best practices, selecting and using frameworks and security-specific cloud technologies and products
Define standards and processes for evaluating application compliance with standards and best practices
Develop and drive application security awareness training programs across the organization
Review hands-on application implementations and get involved in high-risk, complex application designs, architectures, and development
Lead the development of comprehensive application and data security policies and standards
Design and develop technical solutions to address vulnerabilities in unsupported vendor products
Collaborate with Engineering and Business teams to develop secure engineering practices
Act as a security leader, driving the integration of secure engineering practices across the organization
Analyze novel security attack vectors and design countermeasures
Lead pen-testing, incident post-mortem analysis, and cleanup efforts
Spearhead the evaluation and deployment of cutting-edge security solutions
Participate in operational on-call duties to support a 24/7 infrastructure
Lead incident response situations
Mentor junior engineers and organize training sessions
Participate in security research and explore next-generation security tools and practices.

Requirements:

15+ years of experience in developing and deploying security technologies
12+ years of experience with one or more general-purpose programming/script languages including but not limited to: Java, C/C++, C#, Python, JavaScript, Shell Script, PowerShell
Proficiency in Public Cloud (AWS/Azure/GCP) & Network Security
Experience with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code
Strong experience with implementing and managing data protection measures and compliance with data protection regulations (e.g., GDPR, CCPA)
Experience with directing remote/virtual/hybrid teams
Proven track record in leading security initiatives from inception through to successful deployment, demonstrating exceptional project management skills and the ability to navigate complex stakeholder landscapes.

Nice to have:

Strong technical expertise with Architecting Public Cloud solutions and processes
Strong technical expertise with Networking and Software-Defined Networking (SDN) principles
Strong technical expertise with developing and interpreting Network, Sequence, and Dataflow diagrams
Understanding of at least one compliance framework (HIPAA, HITRUST, PCI, NIST, CSA)
MSSP or similar certifications
Strong technical expertise with security solutions for data warehouses and big data platforms, particularly with technologies like Snowflake
Strong technical expertise in defining and implementing cyber resilience standards, policies, and programs for distributed cloud and network infrastructure, ensuring robust redundancy and system reliability
Experience in influencing industry security standards and contributing to open-source projects or security communities, highlighting a broader impact beyond the immediate organization.

What we offer:

Medical, dental, and vision benefits
401(k) retirement savings plan
Employee Stock Purchase Plan
Fully-paid term life insurance plan
Short-term and long-term disability benefits
Well-being programs
Education assistance
Free development courses
CVS store discount
Discount programs with participating partners
Paid Time Off (PTO)
Paid holidays throughout the calendar year.

Additional Information:

Job Posted:

March 18, 2025

Expiration:

July 31, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Distinguished Engineer - Application Security Engineering