AVP, Application Security & Secure SDLC

CVS Health; Woonsocket (RI); On-site; USD 185,400 - 375,950; Full time

Benefits offered by this job

Medical, dental, vision

Retirement plan

Bonus eligibility

Paid time off

Job summary

CVS Health seeks an accomplished security leader to serve as Associate Vice President of Application Security, defining the enterprise strategy for secure software across the full development lifecycle. This role leads security engineers and architects and partners with Developer Experience to embed security into agile practices.

The AVP will balance security outcomes with developer productivity, guiding policy, tooling, and governance to enable secure software delivery at scale across CVS

Qualifications

• 12+ years of progressive experience in information security, with leadership in application security.
• Hands-on coding experience in modern languages; credibility with engineering teams.
• Experience securing SDLC, CI/CD, and cloud-native apps.

Responsibilities

• Define and own enterprise application security strategy, policy, and roadmaps.
• Lead SDLC integration of security scanning, testing, and policy enforcement into CI/CD.
• Oversee SAST/DAST, WAF, code repository scanning, and SCA programs.

Skills

Security Leadership

Cloud Security

Code Review

CI/CD

Communication

Education

Bachelor's Degree

Tools

SAST

DAST

SCA

WAF

Job description

CVS Health seeks an accomplished security leader to serve as Associate Vice President of Application Security, defining the enterprise strategy for secure software across the full development lifecycle. This role leads security engineers and architects and partners with Developer Experience to embed security into agile practices.

The AVP will balance security outcomes with developer productivity, guiding policy, tooling, and governance to enable secure software delivery at scale across CVS