Senior AppSec Architect—AI & DevSecOps Leader

CVS Health; New York (NY); Hybrid; USD 175,000 - 335,000; Full time

Job summary

CVS Health is seeking a senior technical leader for Application Security to set the architectural direction for securing the software that powers web, mobile, API, and AI-native applications across cloud and on-prem environments. You will partner with leadership to define and deliver a proactive, developer-friendly security program.

This role owns the security tooling stack (SAST, DAST, SCA, IAST/RASP, IaC, container scanning) and drives integration into CI/CD and Developer Experience.

Qualifications

• 15+ years in technical roles influencing across technical and executive audiences.
• 10+ years bridging deep technical work and business strategy.
• 10+ years hands-on software engineering across Java, C#, JavaScript/TypeScript, Python, Go.
• 8+ years in application security at enterprise scale, including threat modeling and secure code review.
• 5+ years setting multi-year technical strategy and architectural roadmaps for enterprise-scale security.
• Deep knowledge of modern application security tooling: SAST, DAST, SCA, IAST/RASP, secrets scanning, API security, IaC, container scanning.
• Experience integrating security controls into CI/CD pipelines and developer platforms.
• Strong written and verbal communication, including briefing executives.

Responsibilities

• Lead enterprise application security strategy and architecture across web, mobile, API, microservices and AI-native apps.
• Define and deliver ASPM program, shifting security left into design and CI/CD.
• Own the security tooling stack and its integration into DevEx and CI/CD pipelines.
• Collaborate with Developer Experience and platform teams to deliver security as native platform features.
• Provide hands-on support to engineering teams and guide evaluation of AI-native security tooling.

Skills

Technical leadership

Business strategy bridging

Software engineering

Application security

CI/CD integration

Cloud-native security

ToolingSecurity (SAST/DAST/IAST)

Education

Bachelor's degree in Computer Science, Engineering, or a related field

Tools

GitHub Actions

GitLab CI

Jenkins

Argo

Container registries

Artifact repositories

Service catalogs

Job description

CVS Health is seeking a senior technical leader for Application Security to set the architectural direction for securing the software that powers web, mobile, API, and AI-native applications across cloud and on-prem environments. You will partner with leadership to define and deliver a proactive, developer-friendly security program.

This role owns the security tooling stack (SAST, DAST, SCA, IAST/RASP, IaC, container scanning) and drives integration into CI/CD and Developer Experience.