Remote Senior Manager, App Security Engineering

Hispanic Alliance for Career Enhancement; Pennsylvania; Hybrid; USD 118,450 - 236,900; Full time

Job summary

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security, vulnerability management, and secure software delivery across a complex technology environment. The Senior Manager will lead a team responsible for application security engineering, vulnerability management, software supply chain security, and developer security enablement.

This is a U.S.-based remote position with candidates residing in the United States.

Qualifications

• 7+ years of experience developing, implementing, and operating enterprise security technologies across Application Security, Container Security, Data Security, Infrastructure Security, or related cybersecurity domains.
• 7+ years of experience leading security programs and initiatives from design and implementation through operationalization and continuous improvement within enterprise environments.
• 5+ years of experience securing cloud‑native and modern application environments leveraging AWS, Azure, or GCP, including containers, Kubernetes, Infrastructure‑as‑Code (IaC), and Security‑as‑Code practices.
• 5+ years of experience supporting secure software development lifecycle (SDLC) programs, vulnerability management, security testing, regulatory compliance, and enterprise application portfolios.
• 4+ years of experience with application security technologies including SAST, SCA, CVA, mobile application security testing, secrets scanning, software supply chain security, and developer enablement programs.
• 2+ years of experience leading, mentoring, managing, and developing security engineering, application security, vulnerability management, or cybersecurity teams.

Responsibilities

• Lead the design, implementation, and governance of enterprise application security programs, secure development standards, and software supply chain security practices.
• Establish security requirements, security definitions of done, launch readiness criteria, and automated controls that enable secure software delivery across cloud‑native, hybrid, and legacy environments.
• Drive adoption of secure coding practices and developer‑focused security capabilities across enterprise engineering organizations.
• Oversee the end‑to‑end vulnerability management lifecycle, including identification, prioritization, remediation, exception management, validation, and reporting.
• Establish operational metrics, service level objectives, governance processes, and executive reporting mechanisms that drive accountability and measurable risk reduction.
• Lead enterprise response efforts for critical and zero‑day vulnerabilities, including risk assessment, stakeholder communication, remediation coordination, and executive reporting.
• Drive adoption of modern security technologies and DevSecOps capabilities, including SAST, SCA, container security, secrets management, SBOM, and software supply chain security solutions.
• Lead automation of security controls within CI/CD pipelines to improve operational efficiency, strengthen risk mitigation, and accelerate secure software delivery.
• Evaluate, implement, and optimize application security, cloud security, and software supply chain security technologies across on‑premises, cloud, and hybrid environments.
• Assess and adopt emerging technologies, including AI‑powered security and developer productivity solutions, that improve security outcomes and operational effectiveness.
• Lead and develop a high‑performing team of security professionals while fostering a culture of technical excellence, accountability, innovation, and continuous improvement.
• Build and scale security programs that drive developer adoption, self‑service security capabilities, and DevSecOps maturity across enterprise engineering teams.
• Partner across Engineering, Product, Architecture, Infrastructure, Risk, Compliance, and Cybersecurity teams to define strategic roadmaps, enable secure engineering practices, and support enterprise transformation initiatives, including Health 100.
• Drive workforce development, capacity planning, operational readiness, and execution of strategic security objectives.

Skills

Application Security

Vulnerability Management

Security Engineering

DevSecOps

Cloud Security

Leadership

Strategic Planning

Education

Bachelor’s degree

Tools

JFrog

Snyk

Veracode

Wiz

GitGuardian

Prisma Cloud

Job description

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security, vulnerability management, and secure software delivery across a complex technology environment. The Senior Manager will lead a team responsible for application security engineering, vulnerability management, software supply chain security, and developer security enablement.

This is a U.S.-based remote position with candidates residing in the United States.