Staff Security Engineer, CVS Health

CVS Health

Location:
United States

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

130295.00 - 260590.00 USD / Year

Save Job

Apply Position

Job Description:

At CVS Health, we’re building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care. As the nation’s leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

Job Responsibility:

Incorporate AI/ML technologies into security frameworks to enhance threat detection, automate security processes, and improve incident response capabilities
Develop and enforce engineering security policies and standards
Develop and enforce data security policies and standards
Drive security awareness across the organization
Lead the development and enforcement of comprehensive security policies and standards, integrating advanced security practices throughout the software development lifecycle to mitigate risks and align with industry-leading security protocols
Work with data scientists and machine learning engineers to implement AI-driven security solutions that proactively identify vulnerabilities and anomalies in real-time
Collaborate with Engineering and Business teams to develop secure engineering practices
Act as a pivotal security leader, driving the integration of secure engineering practices across the organization while liaising with senior management to ensure a cohesive security strategy that aligns with business objectives
Analyze, develop, and configure security solutions across multi-cloud, on-premises, and colocation environments, ensuring application security, integrity, confidentiality, and availability of data
Lead security testing, vulnerability analysis, and documentation
Spearhead the evaluation and strategic deployment of cutting-edge security solutions, emphasizing scalability, performance, and adaptability, to fortify the organization's defense against evolving threats
Participate in operational on-call duties to support a 24/7 infrastructure across multiple regions and environments (cloud, on-premises, colocation)
Lead by example in incident response situations, orchestrating rapid and effective responses while leveraging these experiences to bolster future resilience and response strategies
Provide training on AI/ML security applications and best practices, ensuring the team is equipped to leverage these technologies effectively
Demonstrated leadership skills with developing a comprehensive mentorship program for junior engineers, including organizing regular training sessions to elevate the team's technical and security skills
Research and evaluate emerging AI/ML technologies that can be applied to enhance security measures, staying ahead of potential threats and vulnerabilities
Proven track record with participation in security research and the exploration of next-generation security tools and practices
Incorporate AI/ML considerations into the security roadmap, ensuring that the organization is prepared to adopt and integrate these technologies as part of its long-term security strategy
Play a key role in the strategic planning of the organization's security roadmap, including conducting thorough risk assessments, allocating budgets for security initiatives, and aligning long-term security strategies with overarching business goals

Requirements:

7+ years of experience in developing and deploying security technologies
5+ Years of lead experience in Cloud, Java applications with automation knowledge
3+ years of expertise in machine learning, statistical analysis, security, and network data to model risk-driven models of workforce behavior and provide context to security analysts to drive business decisions
3+ years of experience in AI/ML
3+ years of programming experience using Python, pyTorch, and analytics platforms on various big data platforms, with knowledge of advanced analytics tools to analyze large datasets from various sources
Hands-on experience with LLMs and Deep Neural Network architectures, along with SQL expertise
Proficiency in Public Cloud (AWS/Azure/GCP) & Network Security
Strong experience with implementing and managing data protection measures and compliance with data protection regulations (e.g., GDPR, CCPA)
Proven track record in leading security initiatives from inception through to successful deployment, demonstrating exceptional project management skills and the ability to navigate complex stakeholder landscapes

Nice to have:

Strong technical expertise with Architecting Public Cloud solutions and processes
Strong technical expertise with Networking and Software-Defined Networking (SDN) principles
Strong technical expertise with developing and interpreting Network, Sequence, and Dataflow diagrams
Experience with direct, remote, and virtual teams
Understanding of at least one compliance framework (HIPAA, HITRUST, PCI, NIST, CSA)
Strong technical expertise with security solutions for data warehouses and big data platforms, particularly with technologies like Snowflake
Strong technical expertise in defining and implementing cyber resilience standards, policies, and programs for distributed cloud and network infrastructure, ensuring robust redundancy and system reliability
Experience in influencing industry security standards and contributing to open-source projects or security communities, highlighting a broader impact beyond the immediate organization

What we offer:

Affordable medical plan options
401(k) plan (including matching company contributions)
Employee stock purchase plan
No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching
Paid time off
Flexible work schedules
Family leave
Dependent care resources
Colleague assistance programs
Tuition assistance
Retiree medical access

Additional Information:

Job Posted:
May 14, 2025

Expiration:
June 20, 2025

Employment Type:

Fulltime

Work Type:

Remote work

View All Jobs In This Company

Job Link Share:

Staff Security Engineer