Remote Senior Manager, App Security & DevSecOps

9025 CVS Shared Services Resources LLC; New York (NY); Hybrid; USD 118,450 - 260,590; Full time

Job summary

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security, vulnerability management, secure software delivery, and security engineering capabilities across a complex technology environment. This U.S.-based remote role requires residency in the United States.

You will partner with Engineering, Architecture, Infrastructure, Product, Risk, Compliance, and Cybersecurity teams to integrate security into development processes and support secure

Qualifications

• Bachelor's degree from an accredited college or university, or equivalent experience.
• 7+ years of experience developing, implementing, and operating enterprise security technologies across domains.
• 5+ years securing cloud-native environments including AWS/Azure/GCP and containers.
• 4+ years of application security technologies including SAST, SCA, SBOM, and developer enablement.

Responsibilities

• Lead design, implementation, and governance of enterprise application security programs and secure software delivery.
• Oversee end-to-end vulnerability management lifecycle, prioritization, remediation, and reporting.
• Drive security automation within CI/CD pipelines and DevSecOps capabilities across environments.
• Lead and develop a high-performing security team and partner with cross-functional groups to enable secure engineering.

Skills

Enterprise security

Vulnerability management

DevSecOps

Cloud security

Security governance

Leadership

Education

Bachelor's degree

Tools

SAST

SCA

SBOM

Container security

Kubernetes

IaC

CI/CD tooling

Job description

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security, vulnerability management, secure software delivery, and security engineering capabilities across a complex technology environment. This U.S.-based remote role requires residency in the United States.

You will partner with Engineering, Architecture, Infrastructure, Product, Risk, Compliance, and Cybersecurity teams to integrate security into development processes and support secure