CVS Health

Principal Application Security Engineer – AI & Agentic Systems

CVS Health
Apply
9 days ago
Remote, Worldwide or New York, NY, USAStaff+
H1B Sponsor

Base Salary

$144k - $288k/yr

Responsibilities

  • Lead development and enforcement of application and AI security policies, standards, guardrails, and secure-by-design practices.
  • Establish secure design patterns for AI agents covering prompt management, tool invocation, memory handling, autonomy boundaries, and escalation controls.
  • Architect and review secure designs for LLM, foundation model, RAG, agentic, and tool-using systems.
  • Define identity, authorization, data access, observability, and responsible data-use controls for agentic environments.
  • Lead threat modeling, abuse and misuse analysis, security testing, risk assessments, and secure design reviews for AI-enabled systems.
  • Provide technical leadership during application and AI security incidents and improve controls based on operational learnings.
  • Influence enterprise security strategy, advise senior leadership, mentor senior and principal engineers, and shape the long-term AI security roadmap.

Requirements

  • 10+ years of experience designing, building, and securing large-scale applications and platforms.
  • 7+ years of application security experience, including threat modeling, secure design, and vulnerability management.
  • 7+ years of programming experience with one or more of Python, Java, JavaScript, C#, or Go.
  • 5+ years developing and securing AI and ML workloads, including recent generative AI and agentic workload experience.
  • 5+ years of experience with public cloud platforms including AWS, Azure, and/or GCP and modern application architectures.
  • 3+ years of experience with containerized, serverless, and microservice-based architectures.
  • Preferred qualifications include securing AI agents, RAG pipelines, and tool-using LLM systems; leading enterprise-scale security initiatives; familiarity with AI governance, responsible AI, and emerging AI security standards; integrating controls into CI/CD pipelines; knowledge of PCI, HIPAA, NIST, HITRUST, and CSA; enterprise-level influence; and security research or open-source contributions.
  • Bachelor’s degree or equivalent experience, with a high school diploma and 4 years of relevant experience accepted as an alternative.

Benefits

  • Full-time position with medical, dental, and vision coverage.
  • Paid time off, retirement savings options, wellness programs, and other well-being resources based on eligibility.
  • Eligible for CVS Health bonus, commission, or short-term incentive programs and an equity award target.
  • Application window is anticipated to close on September 21, 2026.
CVS Health

About CVS Health

10,000+ employees

CVS Health is the leading health solutions company, delivering care like no one else can. We reach more people and improve the health of communities across America through our local presence, digital channels and over 300,000 dedicated colleagues. Wherever and whenever people need us, we help them with their health – whether that’s managing chronic diseases, staying compliant with their medications or accessing affordable health and wellness services in the most convenient ways. We help people navigate the health care system – and their personal health care – by simplifying health care one person, one family and one community at a time. Follow @CVSHealth on social media.

Contact me