Staff Security Engineer

At CVS Health, we're building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.As the nation's leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues - caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.Position Summary: CVS Pharmacy, Inc., a CVS Health company, is hiring for the following role in Woonsocket, RI: Staff Security Engineer to be responsible for conducting application and infrastructure penetration tests and red teaming engagements to help strengthen the security of perimeter and internal-facing assets. Conduct advanced penetration tests on web applications, mobile applications, network infrastructure, and cloud environments. Perform regular risk-based and intelligence-led penetration tests on public-facing and perimeter assets. Collaborate with SOC, VM and other stakeholder teams to uncover and verify security weaknesses. Develop, plan and execute detailed Red Teaming engagements. Assist in scoping, executing and peer reviewing prospective change and operational assurance penetration testing engagements. Understand and safely use various penetration testing tools and when appropriate, emulating hacker tactics, techniques, procedures. Participate and contribute on risk assessment and threat modeling sessions to support security initiatives. Develop scripts, tools, or methodologies to enhance CVS's penetration testing processes. Develop comprehensive and accurate reports and presentations for various consumers of penetration testing results. Keep up with the latest cybersecurity threats, vulnerabilities and trends. Mentor and train junior team members and share knowledge and best practices. Telecommuting available. Multiple positions.- Requirements: Bachelor's degree (or foreign equivalent) in Computer Science, Computer Engineering, Information Technology, Engineering, or a related field and five (5) years of progressive, postbaccalaureate experience in the job offered or related occupation. Requires three (3) years of experience in each of the following:
• IT Information security services, including application penetration testing, Mobile application security assessment, Infrastructure Penetration testing, Vulnerability Assessment and Network/Server hardening;
• Performing security assessments and review of applications, including documenting technical issues;
• Defining baseline security configuration for operating systems across multiple platforms;