Lead AppSec Engineer – DevSecOps & Cloud Security

CVS Health; Rhode Island; Hybrid; USD 130,000 - 261,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Retirement savings options

Wellness programs

Equity opportunity

Job summary

CVS Health is seeking a Lead Application Security Engineer to guide secure software delivery across the Health 100 portfolio and to advance DevSecOps practices at enterprise scale.

You will partner with engineering teams to implement enterprise security capabilities, strengthen security outcomes, and shape modern security engineering practices that reduce risk and improve release readiness across one of CVS Health's most strategic application portfolios.

Qualifications

• 7+ years of experience in application security engineering, DevSecOps, cloud security, platform security, or software engineering in enterprise settings.
• Deep expertise implementing security controls across modern software delivery pipelines, including testing, cloud security, container security, and IoC security.
• Proven success leading enterprise security implementations, platform migrations, and large-scale modernization initiatives.
• Strong knowledge of AWS, Azure, or GCP, Kubernetes, IaC, and secure SDLC methodologies.
• Hands-on proficiency with modern programming and scripting languages, plus vulnerability management and risk reduction.

Responsibilities

• Lead onboarding and secure-by-default patterns across the Health 100 portfolio.
• Drive security platform implementations and modernization efforts at scale.
• Design automated security controls and self-service security solutions within delivery pipelines.
• Lead vulnerability remediation, software supply chain security, and cloud/container/mobile security initiatives.
• Provide architecture guidance and mentoring to engineers while enforcing security standards.

Skills

Application security

DevSecOps

Cloud security

Kubernetes

Automation

Security testing

Education

Bachelor's degree

Tools

Wiz

Snyk

Checkmarx

Gitleaks

Data Theorem

MobSF

SBOM tooling

Job description

CVS Health is seeking a Lead Application Security Engineer to guide secure software delivery across the Health 100 portfolio and to advance DevSecOps practices at enterprise scale.

You will partner with engineering teams to implement enterprise security capabilities, strengthen security outcomes, and shape modern security engineering practices that reduce risk and improve release readiness across one of CVS Health's most strategic application portfolios.