Lead Application Security & DevSecOps Architect

CVS Health; Connecticut; Hybrid; USD 130,000 - 261,000; Full time

Job summary

CVS Health leads security across the Health 100 portfolio, driving secure software delivery and DevSecOps practices at enterprise scale. The Lead Application Security Engineer strengthens application security, enhances automation, and enables development teams to adopt secure-by-default practices throughout the SDLC.

The role partners with engineering across cloud, platform, and security organizations to advance security capabilities and enterprise-wide patterns, shaping secure healthcare

Qualifications

• 7+ years of experience in application security engineering and related fields.
• Experience implementing security controls across modern software delivery pipelines.
• Proven success leading enterprise security implementations and migrations.
• Strong knowledge of AWS, Azure, or GCP, Kubernetes, IaC/Sec, and secure development methodologies.
• Hands-on programming and scripting experience; vulnerability management and software supply chain security.

Responsibilities

• Lead onboarding and secure-by-default patterns across the Health 100 portfolio.
• Drive security platform implementations and tooling modernization.
• Design automated security controls and self-service security solutions.
• Lead remediation across CSPM, workload protection, scanning and risk reduction.
• Provide architecture guidance, mentor engineers, and establish security standards.

Skills

Application security

DevSecOps

Cloud security

Kubernetes

IaC security

Vulnerability management

Secure SDLC

Education

Bachelor's degree

Tools

Wiz

Snyk

Checkmarx

Gitleaks

Data Theorem

MobSF

SBOM tooling

Job description

CVS Health leads security across the Health 100 portfolio, driving secure software delivery and DevSecOps practices at enterprise scale. The Lead Application Security Engineer strengthens application security, enhances automation, and enables development teams to adopt secure-by-default practices throughout the SDLC.

The role partners with engineering across cloud, platform, and security organizations to advance security capabilities and enterprise-wide patterns, shaping secure healthcare