AVP, Application Security & Secure SDLC

Relha LLC; Rhode Island; On-site; USD 185,000 - 376,000; Full time

Job summary

CVS Health is seeking an experienced Associate Vice President of Application Security to define and execute the enterprise strategy for securing software across the full development lifecycle. You will lead a team of engineers and architects, partnering with DevEx to embed security into agile delivery and advise executives on software security risk.

You will drive standards for secure development, code scanning, vulnerability management, and policy enforcement, balancing security with developer

Qualifications

• 12+ years of progressive experience in information security, with at least 5 years in application security leadership.
• Hands-on experience with SAST, DAST, SCA, and WAF tooling and governance.
• Strong communication and ability to influence senior stakeholders.

Responsibilities

• Define and own the enterprise application security strategy, roadmap, and policy framework.
• Lead integration of security tooling into CI/CD pipelines and DevSecOps practices.
• Oversee SAST/DAST/ SCA programs and vulnerability remediation workflows.
• Collaborate with executive leadership to communicate risk posture and progress.
• Build and develop a high-performing team of security engineers and architects.

Skills

Security leadership

Application security

SDLC integration

CI/CD

Education

Bachelor's degree in a related field

Tools

SAST

DAST

SCA

WAF

Job description

CVS Health is seeking an experienced Associate Vice President of Application Security to define and execute the enterprise strategy for securing software across the full development lifecycle. You will lead a team of engineers and architects, partnering with DevEx to embed security into agile delivery and advise executives on software security risk.

You will drive standards for secure development, code scanning, vulnerability management, and policy enforcement, balancing security with developer