Remote Senior Manager, App Security & DevSecOps

CVS Health; City of Albany (NY); On-site; USD 118,450 - 260,590; Full time

Benefits offered by this job

Comprehensive benefits package

Remote work option

Job summary

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security programs, vulnerability management, secure software delivery, and security engineering capabilities across a complex technology environment.

In this U.S.-based remote role, you will manage a team responsible for application security engineering, vulnerability management, secure software supply chain, and DevSecOps initiatives while partnering with Engineering, Architecture, Risk,

Qualifications

• 7+ years of experience developing, implementing, and operating enterprise security technologies across multiple cybersecurity domains.
• 7+ years of experience leading security programs and initiatives from design through operationalization in enterprise environments.
• 5+ years of experience securing cloud-native and modern application environments (AWS/Azure/GCP) including containers, Kubernetes, IaC, and Security-as-Code.
• 5+ years supporting secure SDLC, vulnerability management, security testing, compliance, and application portfolios.
• 4+ years with application security technologies (SAST, SCA, CVA, etc.) and developer enablement programs.
• 2+ years leading, mentoring, and developing security engineering teams.

Responsibilities

• Lead enterprise application security programs, secure development standards, and software supply chain security practices.
• Define secure delivery criteria and automated controls across cloud-native, hybrid, and legacy environments.
• Drive adoption of secure coding practices and developer-focused security capabilities.

Skills

Security program leadership

DevSecOps

Security automation

Developer enablement

Executive reporting

Education

Bachelor's degree

Tools

SAST

SCA

Container security

SBOM

Security as Code

JFrog/Snyk/Veracode/Prisma Cloud

Job description

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security programs, vulnerability management, secure software delivery, and security engineering capabilities across a complex technology environment.

In this U.S.-based remote role, you will manage a team responsible for application security engineering, vulnerability management, secure software supply chain, and DevSecOps initiatives while partnering with Engineering, Architecture, Risk,