Senior AppSec Architect & AI Security Lead

Koitecc Solutions; New York (NY); Remote; USD 175,000 - 335,000; Full time

Job summary

CVS Health is seeking a Distinguished Engineer - Application Security to define the enterprise AppSec strategy, secure AI adoption, and transform how security is built into software across web, mobile, API, and cloud environments.

You will own the tooling stack, drive design reviews, and partner with DevX and Platform teams to deliver secure-by-default developer experiences, while communicating win/win outcomes to executives.

Qualifications

• 15+ years in technical roles influencing across audiences.
• 10+ years bridging deep tech and business strategy.
• 10+ years hands-on software engineering across Java, C#, JS, Python, Go.
• 8+ years in enterprise security with threat modeling and reviews.
• 5+ years setting multi-year technical roadmaps.
• Deep knowledge of modern AppSec tooling: SAST, DAST, SCA, IAST/RASP, etc.
• Experience integrating security into CI/CD pipelines with Git-based workflows.
• Strong knowledge of SBOMs, SLSA, provenance, licensing governance.
• Cloud-native architectures: Kubernetes, microservices; API design.
• Transform security programs to developer-native, continuous operations.
• Partner with platform teams to deliver security as native features.
• Strong written and verbal communication with executives.

Responsibilities

• Define the enterprise AppSec strategy and architecture.
• Lead integration of AI-native appsec tooling and guardrails.
• Own tool selection, evaluation, and ASPM consolidation.
• Provide hands-on support to teams adopting standards.
• Bridge technical teams and business stakeholders without direct authority.
• Collaborate with Developer Experience and Platform teams to embed security in pipelines.

Skills

Technical leadership

Architectural strategy

Executive communication

CI/CD integration

Security engineering

Cloud native

Education

Bachelor's degree in CS/Engineering

CISSP / CSSLP / OSWE / OSCP

Tools

SAST

DAST

SCA

IAST/RASP

Secrets scanning

API security

IaC scanning

ASPM/ASOC

CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, Argo)

Job description

CVS Health is seeking a Distinguished Engineer - Application Security to define the enterprise AppSec strategy, secure AI adoption, and transform how security is built into software across web, mobile, API, and cloud environments.

You will own the tooling stack, drive design reviews, and partner with DevX and Platform teams to deliver secure-by-default developer experiences, while communicating win/win outcomes to executives.