Senior AppSec Architect & AI Security Strategy

CVS Health; United States; A distancia; USD 175.000 - 335.000; Jornada completa

Descripción de la vacante

CVS Health is seeking a Distinguished Engineer - Application Security to define the enterprise AppSec strategy and architectural direction across web, mobile, API, microservices, and AI-native apps. The role partners with the AVP to drive security across CI/CD pipelines and developer platforms.

You will chart a path for secure-by-default tooling, integrate SAST/DAST/IAST, and lead security posture management with a focus on AI-assisted software development and cloud-native architectures.

Formación

• 15+ years in technical roles with ability to influence across audiences
• 10+ years bridging technical work and business strategy
• 10+ years hands-on software engineering across Java, C#, JS/TS, Python, Go
• 8+ years in application security at enterprise scale with threat modeling and secure code reviews
• 5+ years setting multi-year technical roadmaps for AppSec/DevSecOps programs
• Deep knowledge of modern AppSec tooling (SAST, DAST, SCA, IAST/RASP) and CI/CD integration

Responsabilidades

• Own the technical strategy and end-to-end architecture of the AppSec tooling stack
• Drive enterprise AppSec strategy, secure AI adoption, and CI/CD integration
• Lead design reviews, and contribute hands-on to critical components
• Partner with Developer Experience to surface security as native platform features
• Define guardrails for safe AI coding assistants and AI-native tooling

Conocimientos

AppSec

Threat modeling

DevSecOps

CI/CD

Architectural design

Programming languages: Java, C#, JavaS

Cloud-native architectures

Educación

Bachelor's degree in Computer Science, Engineering, or a related field

Herramientas

SAST

DAST

SCA

IAST/RASP

Kubernetes

Descripción del empleo

CVS Health is seeking a Distinguished Engineer - Application Security to define the enterprise AppSec strategy and architectural direction across web, mobile, API, microservices, and AI-native apps. The role partners with the AVP to drive security across CI/CD pipelines and developer platforms.

You will chart a path for secure-by-default tooling, integrate SAST/DAST/IAST, and lead security posture management with a focus on AI-assisted software development and cloud-native architectures.