Application Security Engineering Leader

Hispanic Alliance for Career Enhancement; Massachusetts; Hybrid; USD 118,450 - 260,590; Full time

Benefits offered by this job

Medical, dental, vision coverage

Remote work flexibility

Bonus potential

Job summary

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security, vulnerability management, secure software delivery, and security engineering across a complex tech environment.

The role partners with Engineering, Architecture, Infrastructure, Product, Risk, Compliance, and Cybersecurity to embed security into development lifecycles and scale DevSecOps practices across cloud-native, on-prem, and hybrid environments.

Qualifications

• 7+ years of experience in enterprise security programs across multiple domains.
• 7+ years leading security programs from design through operation within enterprise environments.
• 5+ years securing cloud-native environments (AWS, Azure, or GCP) including containers and IaC.
• 5+ years supporting secure SDLC programs, vulnerability management, and regulatory compliance.
• 4+ years with application security technologies including SAST, SCA, CVA, secrets scanning, SBOM, and developer enablement.
• 2+ years leading security engineering teams.

Responsibilities

• Lead the design, implementation, and governance of enterprise application security programs, secure development standards, and software supply chain security practices.
• Establish security requirements, definitions of done, launch readiness criteria, and automated controls for secure software delivery across cloud-native, hybrid, and legacy environments.
• Drive adoption of secure coding practices and developer-focused security capabilities across enterprise engineering organizations.

Skills

Enterprise security program leadership

Vulnerability management

DevSecOps

Cloud security

Secure software delivery

Education

Bachelor's degree

Tools

SAST tools

SCA tools

SBOM tooling

CI/CD security tooling

Job description

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security, vulnerability management, secure software delivery, and security engineering across a complex tech environment.

The role partners with Engineering, Architecture, Infrastructure, Product, Risk, Compliance, and Cybersecurity to embed security into development lifecycles and scale DevSecOps practices across cloud-native, on-prem, and hybrid environments.