Remote AVP, Application Security — Lead Secure DevOps

name; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

CVS Health is seeking an experienced security leader to serve as Associate Vice President of Application Security, responsible for defining and executing the enterprise strategy for securing software across its full development lifecycle. This role owns the policies, technical standards, and tooling that enable CVS Health's engineering teams to build and deploy secure applications at scale.

This leader will guide a high-performing team, partner with Developer Experience, and advise executives on

Qualifications

• No formal qualifications stated in the job posting.

Responsibilities

• Define and own the enterprise application security strategy, roadmap, and policy framework aligned with CVS Health's objectives.
• Establish and enforce technical standards for secure software development including code scanning and secure-by-design.
• Advise senior technology and business leaders on emerging application security risks and trends.
• Drive continuous improvement of the application security program via metrics and innovation.
• Integrate security scanning, testing and policy gates into CI/CD pipelines.
• Define strategy and tooling for enterprise-wide SAST scanning and remediation workflows.
• Oversee the DAST program for pre-production and production environments.
• Own the WAF strategy, configuration and operations, including threat monitoring.
• Implement continuous code repository scanning for secrets and misconfigurations.
• Develop policies for AI-assisted code generation security and vulnerability scanning.
• Manage SCA program to remediate vulnerabilities in third-party libraries and OSS.
• Oversee CDN security configuration and policy enforcement.
• Define and maintain application security policies and procedures.
• Ensure compliance with HIPAA, PCI-DSS, CCPA, NIST SSDF, and OWASP.
• Provide executive dashboards on program health and remediation progress.
• Build and lead a high-performing team and collaborate with cross-functional stakeholders.

Job description

CVS Health is seeking an experienced security leader to serve as Associate Vice President of Application Security, responsible for defining and executing the enterprise strategy for securing software across its full development lifecycle. This role owns the policies, technical standards, and tooling that enable CVS Health's engineering teams to build and deploy secure applications at scale.

This leader will guide a high-performing team, partner with Developer Experience, and advise executives on