Senior Application Security Architect

Relha LLC; Phoenix, Northern (AZ, KY); Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Comprehensive benefits package

Bonus and equity eligibility

Job summary

CVS Health is seeking a senior Application Security Architect to shape architectural direction for enterprise security across web, mobile, API, and AI-native apps. You will own ASPM tooling, integrate security into CI/CD, and guide vendor decisions in a rapidly evolving landscape.

You’ll drive secure by design, lead cross‑functional collaboration with platform and developer experience teams, and set guardrails for AI-assisted development across the enterprise.

Qualifications

• 15+ years in technical roles and leadership across technical/executive audiences.
• 10+ years bridging deep technical work with business strategy.
• 8+ years in application security or product security at enterprise scale.
• 5+ years defining multi-year technical roadmaps for SecDevOps programs.
• Deep knowledge of app security tooling: SAST/DAST/SCA/IAST, secrets, API security, container/IaC scanning.

Responsibilities

• Define and drive the architectural direction for application security.
• Own the tooling stack and integration into DevEx and CI/CD.
• Lead design reviews and set standards for security components.
• Partner with platform engineering and developer experience teams.
• Translate security posture into business risk with executive-facing metrics.

Skills

Security architecture

Threat modeling

CI/CD security

DevSecOps

Cloud security

Kubernetes

AI security

Influence without authority

Executive briefing

Security tooling

Education

Bachelor's degree in Computer Science or Engineering

Tools

SAST

DAST

SCA

IAST/RASP

ASPM/ASOC

CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Argo)

Container scanning

IaC scanning

Job description

CVS Health is seeking a senior Application Security Architect to shape architectural direction for enterprise security across web, mobile, API, and AI-native apps. You will own ASPM tooling, integrate security into CI/CD, and guide vendor decisions in a rapidly evolving landscape.

You’ll drive secure by design, lead cross‑functional collaboration with platform and developer experience teams, and set guardrails for AI-assisted development across the enterprise.