Technical Security Analyst

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

We are seeking an early-career Analyst to support our enterprise information security program. In this role, your hands-on security engineering or network security background will aid you in translating technical security risks into clear business impacts, advising stakeholders on pragmatic risk treatments, and helping to implement and validate security controls across networks, endpoints, and cloud. You’ll partner with IT, product, and business teams to assess threats, identify control gaps, recommend remediation options. The ideal candidate communicates effectively with both technical and non-technical audiences, and is energized by helping the business make informed, risk-based decisions.

Required Qualifications

• 2+ years of professional experience in cybersecurity with emphasis in network security and/or security engineering (e.g., cloud, firewalls, IDS/IPS, endpoint protection, vulnerability management, logging/monitoring).
• Demonstrated experience conducting or supporting risk assessments (e.g., asset/context discovery, threat & likelihood analysis, control gap identification, residual risk estimation) and documenting outcomes in clear, actionable language.
• Familiarity with common security frameworks/controls (e.g., NIST CSF/800-53/800-30, ISO 27001/27002, CIS Critical Security Controls) and ability to map findings to these references.
• Working knowledge of network fundamentals (TCP/IP, routing, segmentation, DNS, TLS), identity and access management, and secure configuration baselines.
• Ability to write clear advisory reports and present risk/controls to stakeholders; strong documentation habits (runbooks, diagrams, tickets).
• Experience collaborating with IT or engineering teams to implement and validate controls (e.g., compensating controls, segmentation changes, logging enrichment).

Preferred Qualifications

• Experience facilitating or contributing to risk registers, exception/acceptance processes, and risk treatment plans with measurable milestones.
• Familiarity with privacy & data protection concepts (e.g., data classification, retention, DLP controls) and regulatory drivers (e.g., SOX/PCI/HIPAA/GLBA as applicable).
• Knowledge of DevSecOps practices (e.g., secrets management, SAST/DAST, SBOMs, CI/CD guardrails).
• Contribution to security awareness or secure-by-design initiatives.
• Relevant certifications (e.g., Security+, Network+, Cloud Fundamentals) or equivalent practical experience.

Education

• Bachelor’s degree in Information Security, Computer Science, Information Systems, Engineering, or a related field or equivalent hands-on experience in cybersecurity/security engineering.
• Continued professional development through training, labs, capture-the-flag, or home lab projects is a plus and can substitute for formal education where appropriate.

Anticipated Weekly Hours

40

Time Type

Full time

Pay Range

The typical pay range for this role is:

$72,100.00 - $144,200.00

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. 
 

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in our comprehensive and competitive mix of pay and benefits – investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include:

• Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.

• No-cost programs for all colleagues including wellness screenings, tobacco cess