Senior Information Security Engineer

At CVS Health, we’re building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.

As the nation’s leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

POSITION SUMMARY

As the Senior Automation Engineer – Adversarial Operations, you will design, develop and maintain automation frameworks and tools that enhance the efficiency and scalability of enterprise Red, Purple, and Penetration Testing functions. The engineer will streamline Service Delivery operations by automating intake, scheduling, and reporting. Purposeful and selective use of AI-assisted automation is encouraged to improve accuracy and efficiency, while maintaining human oversight and engineering rigor. This role enables continuous, data-driven testing and resilience validation through orchestrated workflows, tool integrations, infrastructure automation and metrics. The ideal candidate will have a strong background in designing and implementing automation, security and the ability for pro-active collaboration with various stakeholders for favorable outcomes.

What we expect of you -

• Develop and maintain standard automation pipelines for Red/Purple Team operations using commercial and custom software tools.

• Build integrations across adversarial and cyber defense platforms via Python, REST APIs, Infrastructure as Code (Terraform, Docker) and others.

• Automate Service Delivery workflows, including intake, task routing, scheduling, reporting, and stakeholder notifications through ServiceNow, Jira, and custom API integrations.

• Design and maintain data normalization and analytics pipelines, mapping results to MITRE ATT&CK, D3FEND, and resilience dashboards (Grafana, Neo4j).

• Leverage AI-assisted scripting and summarization to reduce manual data handling and accelerate report generation.

• Maintain secure, auditable, and reusable automation frameworks aligned with enterprise development and security standards.

• Prepare and maintain documentation (technical designs and SOPs.) for the automation solutions under your remit

• Understand the processes and suggest automation opportunities to improve personnel and tool efficacy.

REQUIRED QUALIFICATIONS

• 5+ years of experience in automation, DevSecOps, or cybersecurity engineering roles.

• 3+ years experience in programming and scripting using languages and frameworks like Python, Go, Bash alongside REST API integration experience.

• 3+ years experience in Infrastructure as Code (Terraform, Docker) and CI/CD pipelines (GitLab, Jenkins, or Azure DevOps).

• 3+ years experience in automating complex workflows across multiple platforms securely and efficiently.

PREFERRED QUALIFICATIONS

• Experience automating adversary simulation or Purple Team workflows.

• Familiarity with AI-assisted automation for data parsing, tagging, or report generation.

• Experience working with cloud services.

• Working knowledge of MITRE ATT&CK, D3FEND, CAPEC, and threat-informed defense methodologies.

• Integration experience with ServiceNow, Jira, or enterprise workflow systems.

• Exposure to graph data visualization tools (Grafana, Neo4j, SQLite etc.).

• Working knowledge with tools like Swimlane, DataBricks, Archer, Slack, MS O365 would be a plus.

• Hands-on experience with tools such as AttackForge, BloodHound Enterprise, Horizon3.ai.

• Excellent communication and interaction skills.

• Self-starter and capable individual contributor.

• Ability to manage a requests pipeline for automation, prioritize and service them.

• Cyber security and DevOps certifications.

EDUCATION

Bachelor’s degree or equivalent experience (High School Diploma and 4 years relevant experience)

BUSINES