Staff Security Engineer, CVS Health

CVS Health

Location:
United States, Woonsocket

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

137654.00 - 207000.00 USD / Year

Save Job

Apply Position

Job Description:

Staff Security Engineer responsible for conducting application and infrastructure penetration tests and red teaming engagements to help strengthen the security of perimeter and internal-facing assets at CVS Health.

Job Responsibility:

Conduct application and infrastructure penetration tests and red teaming engagements
Conduct advanced penetration tests on web applications, mobile applications, network infrastructure, and cloud environments
Perform regular risk-based and intelligence-led penetration tests on public-facing and perimeter assets
Collaborate with SOC, VM and other stakeholder teams to uncover and verify security weaknesses
Develop, plan and execute detailed Red Teaming engagements
Assist in scoping, executing and peer reviewing prospective change and operational assurance penetration testing engagements
Understand and safely use various penetration testing tools and when appropriate, emulating hacker tactics, techniques, procedures
Participate and contribute on risk assessment and threat modeling sessions to support security initiatives
Develop scripts, tools, or methodologies to enhance CVS's penetration testing processes
Develop comprehensive and accurate reports and presentations for various consumers of penetration testing results
Keep up with the latest cybersecurity threats, vulnerabilities and trends
Mentor and train junior team members and share knowledge and best practices

Requirements:

Bachelor’s degree (or foreign equivalent) in Computer Science, Computer Engineering, Information Technology, Engineering, or a related field
Five (5) years of progressive, postbaccalaureate experience in the job offered or related occupation
Three (3) years of experience in IT Information security services, including application penetration testing
Three (3) years of experience in Mobile application security assessment
Three (3) years of experience in Infrastructure Penetration testing
Three (3) years of experience in Vulnerability Assessment and Network/Server hardening
Three (3) years of experience in Performing security assessments and review of applications, including documenting technical issues
Three (3) years of experience in Defining baseline security configuration for operating systems across multiple platforms
Three (3) years of experience in Management, construction and maintenance of security tools and infrastructure to support security testing team
Three (3) years of experience in Source code review
Three (3) years of experience in Wireless penetration testing
Three (3) years of experience in Database Security Assessment
Three (3) years of experience in Product Security Review
Completion of a university-level course research project, or internship involving Data structures and algorithms
Completion of a university-level course research project, or internship involving Computer architecture
Completion of a university-level course research project, or internship involving Software testing and system programming
Completion of a university-level course research project, or internship involving Data warehousing and mining
Completion of a university-level course research project, or internship involving Mobile computing

What we offer:

CVS Health bonus, commission or short-term incentive program
Company equity award program
Full range of medical, dental, and vision benefits
401(k) retirement savings plan
Employee Stock Purchase Plan
Fully-paid term life insurance plan
Short-term and long term disability benefits
Well-being programs
Education assistance
Free development courses
CVS store discount
Discount programs with participating partners
Paid Time Off (PTO) or vacation pay
Paid holidays throughout the calendar year

Additional Information:

Job Posted:
September 08, 2025

Employment Type:

Fulltime

Work Type:

Remote work

View All Jobs In This Company

Job Link Share:

Staff Security Engineer