Remote Senior AppSec Architect: AI & DevSecOps

CVS Health; Phoenix (AZ); On-site; USD 175,000 - 335,000; Full time

Job summary

CVS Health is seeking a senior technical leader for Application Security to shape the enterprise security program across web, mobile, API, and cloud environments. You will define architecture, drive secure design, and partner with development teams to bake security into the Developer Experience.

This role can be remote anywhere in the continental USA, with a focus on reducing risk while enabling rapid software delivery and AI-assisted development, threat modeling, and secure code review at scale.

Qualifications

• Extensive cross-functional leadership in security and engineering.
• Experience aligning security with business strategy and goals.
• Hands-on security tooling in enterprise CI/CD environments.
• Deep knowledge of modern application security tooling and flows.
• Ability to translate security into developer-friendly platforms.

Responsibilities

• Define architectural direction for enterprise application security.
• Own tooling stack and integrate into the Developer Experience platform.
• Lead threat modeling, secure design reviews, and code reviews at scale.
• Guide adoption of security controls in CI/CD and DevSecOps programs.
• Collaborate with platform, QE, and product teams to enable secure delivery.

Skills

Strategic leadership

Architecture & strategy

Influence without authority

Cloud-native security

CI/CD security integration

Developer experience collaboration

Executive communication

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

SAST

DAST

SCA

IAST/RASP

Secrets scanning

API security

IaC scanning

Kubernetes security

Job description

CVS Health is seeking a senior technical leader for Application Security to shape the enterprise security program across web, mobile, API, and cloud environments. You will define architecture, drive secure design, and partner with development teams to bake security into the Developer Experience.

This role can be remote anywhere in the continental USA, with a focus on reducing risk while enabling rapid software delivery and AI-assisted development, threat modeling, and secure code review at scale.