Senior Application Security & DevSecOps Leader

CVS Health; New York (NY); Hybrid; USD 130,000 - 261,000; Full time

Job summary

CVS Health is seeking a Lead Application Security Engineer to guide secure software delivery across the Health 100 portfolio. You will partner with engineering teams to implement DevSecOps practices, strengthen security testing, and establish scalable security patterns.

In this senior role, you will mentor engineers, influence security strategy with measurable outcomes, and drive enterprise initiatives using platforms such as Wiz to improve risk reduction and release readiness at scale.

Qualifications

• 7+ years in application security engineering or related fields.
• Experience in secure software delivery pipelines and DevSecOps.
• Proven success leading enterprise security implementations.
• Strong knowledge of AWS, Azure, or GCP, Kubernetes, Infrastructure-as-Code, Security-as-Code, and secure software development methodologies.
• Hands-on proficiency in modern programming and scripting languages.

Responsibilities

• Lead application security onboarding, secure-by-default implementation patterns, release-readiness activities, and adoption of secure software development and DevSecOps practices across the Health 100 portfolio.
• Drive security platform implementations, tooling modernization efforts, configuration standardization, and enterprise adoption of scalable security solutions.
• Design and implement automated security controls, testing capabilities, policy enforcement mechanisms, and self-service security solutions within software delivery pipelines.
• Lead vulnerability remediation, software supply chain security, cloud security, container security, and mobile application security initiatives, including CSPM, cloud workload protection, and security testing—leveraging platforms such as Wiz.
• Serve as a senior technical leader by providing architecture guidance, mentoring engineers, communicating security outcomes to leadership, and establishing security engineering standards.

Skills

Application security

DevSecOps

Cloud security

Kubernetes

Infrastructure-as-Code

Security-as-Code

Software development

Education

Bachelor's degree or equivalent

Tools

Wiz

Snyk

Checkmarx

Gitleaks

Data Theorem

MobSF

SBOM tooling

CSPM

Job description

CVS Health is seeking a Lead Application Security Engineer to guide secure software delivery across the Health 100 portfolio. You will partner with engineering teams to implement DevSecOps practices, strengthen security testing, and establish scalable security patterns.

In this senior role, you will mentor engineers, influence security strategy with measurable outcomes, and drive enterprise initiatives using platforms such as Wiz to improve risk reduction and release readiness at scale.