Jobs / United States / CVS Pharmacy INC
Senior Security Engineer – Akamai & Edge Security Services
CVS Pharmacy INC · 🇺🇸 NY - New York
Sponsorship verdict
Sponsorship possible
One solid signal, not two — worth applying, and worth asking about sponsorship early.
- Employer is on a government sponsor recordThe US Department of Labor certified 191 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 217 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- What CVS Pharmacy INC paid sponsored hires in similar roles1 certified filing for “Sr Security Engineer” (Software Developers) in MO: $135k–$135k, median $135k. Most were filed at wage level IV (100%) — 4 lottery entries, ≈61% projected selection odds for cap-subject employers. Source: US Department of Labor LCA disclosure data (Oct 2025 – Jun 2026).
- Confirmed live todayWhen a source last listed this job as open.
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Sponsor Radar — CVS Pharmacy INC
The US Department of Labor certified 191 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 217 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for CVS Pharmacy INC →
About the role
We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Senior Security Engineer – Akamai & Edge Security Services designs, implements, administers, and optimizes security controls that protect enterprise web applications, APIs, and internet-facing services. This role provides senior technical expertise in Web Application Firewall (WAF), bot protection, DDoS mitigation, API security, DNS security, certificate management, and related edge security technologies. The position partners with application, cloud, infrastructure, network, and security teams to strengthen the enterprise digital perimeter, respond to security threats, troubleshoot complex issues, and continuously improve security controls and operational processes. The role participates in a rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes. Key Responsibilities: Security Engineering & Administration • Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related security services. • Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations. • Design and maintain security controls protecting web applications, APIs, and other internet-facing services. WAF, Bot & Threat Protection • Configure and tune managed and custom WAF protections, rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules. • Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement. • Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats. • Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives. Monitoring & Incident Response • Monitor Akamai security telemetry, Splunk, Grafana, and related platforms for threats and anomalies. • Investigate and resolve security incidents and complex platform issues. • Perform root cause analysis and implement corrective actions. • Provide technical escalation support for critical security events and production issues. Collaboration & Continuous Improvement • Partner with application, cloud, infrastructure, networking, and security teams on application onboarding, troubleshooting, and security improvements. • Support integration of security controls into CI/CD and application delivery processes. • Develop and maintain technical documentation, standards, runbooks, and operational procedures. • Support security automation, audit, compliance, and risk-management initiatives. Required Qualifications • 5+ years of experience in enterprise web application, API, or edge security. • 3+ years of hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms. • 3+ years of working knowledge: Web Application Firewalls (WAF), Bot management and DDoS mitigation, Web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, andor Linux-based environments. • 2+ years of experience analyzing security