Staff Security Engineer

We’re building a world of health around every individual—shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger—helping to simplify health care one person, one family and one community at a time. Position Summary CVS Pharmacy, Inc., a CVS Health company, is hiring a Staff Security Engineer in Woonsocket, RI. The role involves conducting application and infrastructure penetration tests and red‑team engagements to strengthen the security of perimeter and internal‑facing assets. Responsibilities Conduct advanced penetration tests on web applications, mobile applications, network infrastructure, and cloud environments. Perform risk‑based and intelligence‑led penetration tests on public‑facing and perimeter assets. Collaborate with SOC, VM, and other stakeholder teams to uncover and verify security weaknesses. Develop, plan and execute detailed Red Teaming engagements. Assist in scoping, executing and peer reviewing prospective change and operational assurance penetration testing engagements. Use penetration testing tools safely, emulating hacker tactics, techniques and procedures where appropriate. Participate in risk assessment and threat modeling sessions to support security initiatives. Develop scripts, tools or methodologies to enhance CVS’s penetration testing processes. Prepare comprehensive and accurate reports and presentations for various consumers of penetration testing results. Stay current with the latest cybersecurity threats, vulnerabilities and trends. Mentor and train junior team members, sharing knowledge and best practices. Qualifications Bachelor’s degree (or foreign equivalent) in Computer Science, Computer Engineering, Information Technology, Engineering, or a related field and five (5) years of progressive, postbaccalaureate experience in the job offered or a related occupation. At least three (3) years of experience in each of the following areas: IT information security services, including application penetration testing, mobile application security assessment, infrastructure penetration testing, vulnerability assessment, and network/server hardening; performing security assessments and reviewing applications, documenting technical issues; defining baseline security configurations for operating systems across multiple platforms; managing, constructing and maintaining security tools and infrastructure to support security testing teams; source code review; wireless penetration testing; database security assessment; and product security review. Completion of a university‑level course, research project or internship involving data structures and algorithms; computer architecture; software testing and system programming; data warehousing and mining; or mobile computing. Pay Range $137,654.00 to $213,210.00 per year. The actual base salary will depend on experience, education, geography and other factors. This position is eligible for bonus, commission or short‑term incentive programs, as well as an equity award program. Benefits The role includes a comprehensive benefits package: medical, dental and vision coverage; paid time off and paid holidays; 401(k) retirement savings plan; Employee Stock Purchase Plan; fully‑paid term life insurance; short‑term and long‑term disability benefits; well‑being programs; education assistance and free development courses; CVS store discounts; and discounts with partner programs. Telecommuting is available. Multiple positions are open. Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws. This job does not have an application deadline; applications are accepted on an ongoing basis. #J-18808-Ljbffr