CybersecurityJobs.io
← Back to all jobs
CVS Health

Staff Application Security Engineer – AI & Agentic Systems

CVS Health
Denver, CO $107k - $284k/yr Full time Posted 18m ago
Agent Agentic Ai Ai Enabled Security Ai Security Application Security Artificial Intelligence Data Security Engineer Enterprise Risk Generative AI Information Security InfoSec Prompt Injection Retrieval Augmented Generation Security Risk Management Security Security Standards Software Security
Apply Now

Job Description

Join CVS Health in a hands-on security role focused on protecting AI-enabled applications, LLM integrations, and agentic systems. This Staff Application Security Engineer position embeds security into design, development, and operations by partnering closely with engineering, product, platform, and data teams to shape secure patterns and practical guardrails across the enterprise.

Location: Denver, CO (onsite). Pay range: USD 106,605 - 284,280 per year, with eligibility for additional incentive and equity components.

What you’ll do

  • Develop and maintain application and AI security standards, best practices, and guardrails.
  • Promote secure-by-design principles across application and AI development lifecycles.
  • Establish secure design patterns for AI agents, prompt management, tool integrations, memory handling, and autonomous workflows.
  • Partner with engineering teams to identify and mitigate AI-specific risks including prompt injection, model abuse, data leakage, and unauthorized agent actions.
  • Serve as a subject matter expert for the security of AI-enabled applications and agentic systems.
  • Review and guide architectures using large language models, retrieval augmented generation (RAG) pipelines, AI agents, and AI-powered workflows.
  • Define and recommend controls for AI environments including identity, authorization, data protection, observability, and governance.
  • Conduct threat modeling, architecture reviews, and security assessments for applications and AI-enabled systems, including analysis of AI workflows, model integrations, agent interactions, and data flows.
  • Support remediation by partnering with engineering teams to prioritize and address security findings.
  • Evaluate emerging AI security tools and technologies to improve organizational security posture and influence engineering teams to integrate controls into development processes and product roadmaps.
  • Align with privacy, compliance, legal, and risk teams so security controls meet organizational requirements.
  • Support investigation and response efforts for application and AI-related security events, including identifying root causes and driving long-term improvements.
  • Mentor security engineers and development teams on secure coding, threat modeling, and AI security best practices.

What you’ll need

  • 7+ years of experience designing, building, or securing enterprise-scale applications and platforms.
  • 5+ years of application security experience, including threat modeling, secure design, code review, and vulnerability management.
  • 5+ years programming experience in one or more of: Python, Java, JavaScript, C#, or Go.
  • 3+ years developing or securing AI, machine learning, or generative AI solutions.
  • 3+ years experience with public cloud platforms: AWS, Azure, or Google Cloud Platform.
  • Education: Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience (High School Diploma/GED plus 4 years of related experience).

Bonus considerations (preferred)

  • Experience securing modern architectures such as APIs, containers, microservices, and serverless technologies.
  • Strong understanding of secure software development lifecycle practices and application security testing methodologies.
  • Hands-on experience securing AI agents, RAG solutions, and large language model integrations.
  • Experience conducting threat modeling and security assessments for AI-enabled systems.
  • Familiarity with responsible AI principles, AI governance, and emerging AI security frameworks.
  • Experience integrating security controls into CI/CD pipelines.
  • Knowledge of common compliance frameworks including PCI DSS, HIPAA, NIST, HITRUST, and CSA.
  • Ability to influence technical decisions across multiple teams and organizations.
  • Experience contributing to security research, open-source projects, or industry communities.

Technologies you’ll work with

  • Python, Java, JavaScript, C#, Go
  • AWS, Azure, Google Cloud Platform
  • Large language models, retrieval augmented generation, AI agents

CVS Health benefits

  • Comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families.
  • Medical, dental, and vision coverage (based on eligibility).
  • Paid time off (based on eligibility).
  • Retirement savings options (based on eligibility).
  • Wellness programs (based on eligibility).
  • Other resources (based on eligibility).

Compensation details

  • The typical pay range for this role is $106,605.00 - $284,280.00.
  • This position may be eligible for a CVS Health bonus, commission, or short-term incentive program in addition to the base pay range.
  • This position also includes an award target in the company’s equity award program.

Similar Jobs