Staff Security Engineer - Remote

Overview

CVS Health is seeking a Staff Security Engineer to enhance the security of applications and infrastructure through penetration testing and red teaming engagements.

In Short

• Conduct application and infrastructure penetration tests.
• Perform risk-based and intelligence-led penetration tests.
• Collaborate with SOC and other teams to identify security weaknesses.
• Develop and execute Red Teaming engagements.
• Mentor and train junior team members.
• Keep up with cybersecurity threats and trends.
• Create comprehensive reports on penetration testing results.
• Utilize various penetration testing tools effectively.
• Participate in risk assessment and threat modeling sessions.
• Enhance penetration testing processes through tool development.

Requirements

• Bachelor’s degree in a related field.
• Five years of progressive experience in IT security.
• Three years of experience in application and infrastructure penetration testing.
• Experience in vulnerability assessments and network/server hardening.
• Familiarity with security tools and infrastructure management.
• Experience with source code reviews and database security assessments.
• Knowledge of mobile computing and software testing.
• Completion of relevant university-level projects or internships.

Benefits

• Full range of medical, dental, and vision benefits.
• 401(k) retirement savings plan and Employee Stock Purchase Plan.
• Fully-paid term life insurance and disability benefits.
• Paid Time Off (PTO) and paid holidays.
• Well-being programs and education assistance.
• Discount programs with participating partners.
• Opportunities for professional development.
• Supportive work culture and recognition programs.