Note: The job is a remote job and is open to candidates in USA. CVS Health is a healthcare company focused on creating a more connected, convenient, and compassionate health experience. The Senior Security Engineer will join the Cyber Defense organization to conduct proactive threat hunting, strengthen detection engineering, and mature the organization’s security posture. The role collaborates with Detection Engineering, Security Data Analytics, and Incident Response across a modern security stack.
Responsibilities
- Conduct hypothesis-driven threat hunts across endpoint, network, identity, and cloud telemetry using frameworks like MITRE ATT&CK
- Analyze large volumes of log and event data (SIEM, EDR, NetFlow, DNS, cloud audit logs) to identify anomalous or malicious activity
- Document hunt methodology, findings, and outcomes in a structured, repeatable format
- Support incident response investigations with deep-dive analysis when hunts surface confirmed threats
- Stay current on emerging TTPs, malware families, and threat actor campaigns relevant to the organization's industry and threat landscape
Skills
- 5+ years of experience in threat hunting, detection engineering, incident response, or SOC analysis
- Strong understanding of attacker TTPs and the MITRE ATT&CK framework
- Hands-on experience with SIEM platforms (e.g., Chronicle/GCP SecOps, Splunk) and EDR tools (e.g., CrowdStrike)
- Proficiency in query languages (KQL, SPL, YARA-L, or similar) and scripting (Python preferred) for data analysis and automation
- Solid understanding of networking, operating systems (Windows/Linux), and cloud environments (AWS, GCP, or Azure)
- Bachelor's degree from accredited university or equivalent work experience (High School Diploma/GED + 4 years relevant experience)
- Experience in a regulated industry (healthcare, financial services, insurance) with familiarity in compliance frameworks (NIST 800-53, FTC Safeguards Rule)
- Familiarity with data engineering/analytics pipelines (Databricks, NiFi) used to support hunt data access
- Relevant certifications (GCFA, GNFA, GCTI, OSCP, or similar)
- Experience contributing to or building detection content/rules
Benefits
- This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.
- Medical coverage, based on eligibility
- Dental coverage, based on eligibility
- Vision coverage, based on eligibility
- Paid time off, based on eligibility
- Retirement savings options, based on eligibility
- Wellness programs, based on eligibility
- Other resources supporting the physical, emotional, and financial well-being of colleagues and their families, based on eligibility
- Remote work
Company Overview
Company H1B Sponsorship