Senior Application Security Architect | AI-Driven DevSecOps

CVS Health; Georgia; Hybrid; USD 175,000 - 335,000; Full time

Job summary

CVS Health is seeking a senior leader to shape the enterprise application security program. You will define architecture and strategy across SAST, DAST, SCA, IAST/RASP, and AI-native tooling, ensuring security controls are embedded in developer workflows from design to production.

You will collaborate with DevEx, Cloud Security, and Platform teams to standardize secure-by-default paths, governance, and measurable improvements in adoption and remediation velocity.

Qualifications

• 15+ years in technical roles affecting technical and executive audiences.
• 10+ years bridging deep technical work and business strategy.
• 10+ years of hands-on software engineering across Java, C#, JavaScript/TypeScript, Python, Go.
• 8+ years in application security at enterprise scale with threat modeling and secure code review.
• 5+ years defining multi-year technical strategy and roadmaps for enterprise security programs.
• Deep knowledge of SAST, DAST, SCA, IAST/RASP, secrets scanning, API security, container and IaC scanning.
• Experience integrating security into CI/CD pipelines (Git-based workflows, Argo, Jenkins, etc).
• Strong knowledge of SBOMs and software supply chain security.

Responsibilities

• Define and drive the enterprise AppSec strategy and architecture.
• Lead integration of security tooling into CI/CD platforms across teams.
• Guide AI-assisted security tooling adoption and guardrails.
• Partner with platform engineering and developer experience to deliver native security capabilities.

Skills

Senior leadership

Tech-business bridge

Hands-on software engineering

Threat modeling

CI/CD integration

Cloud-native architectures

Security tooling

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

GitHub Actions

GitLab CI

Jenkins

Argo

Kubernetes

Job description

CVS Health is seeking a senior leader to shape the enterprise application security program. You will define architecture and strategy across SAST, DAST, SCA, IAST/RASP, and AI-native tooling, ensuring security controls are embedded in developer workflows from design to production.

You will collaborate with DevEx, Cloud Security, and Platform teams to standardize secure-by-default paths, governance, and measurable improvements in adoption and remediation velocity.