Senior AppSec Architect - Remote & AI Security

Koitecc Solutions; Northern (KY); Hybrid; USD 175,000 - 335,000; Full time

Benefits offered by this job

Medical, dental, vision

Retirement benefits

Paid time off

Flexible work arrangements

Job summary

CVS Health is seeking a senior technology leader to shape the end-to-end application security strategy for a broad range of software, from web and mobile to AI-native systems. You will own tooling architecture, drive secure by design across CI/CD, and steer security decisions in a rapidly evolving vendor landscape.

The role emphasizes developer-native security controls, threat-informed risk management, and collaboration with DevSecOps and platform teams to raise the bar across the enterprise.

Qualifications

• 15+ years in technical roles with influence across technical and exec audiences.
• 10+ years bridging deep technical work and business strategy.
• 10+ years of hands-on software engineering across Java, C#, JavaScript/TypeScript, Python, Go.
• 8+ years in application security at enterprise scale with threat modeling and secure reviews.
• 5+ years setting multi-year technical strategy for enterprise AppSec/DevSecOps.
• Deep knowledge of SAST, DAST, SCA, IAST/RASP, secrets scanning, API security, container & IaC scanning.
• Experience integrating security into CI/CD pipelines and developer platforms.

Responsibilities

• Define and own the architectural direction for enterprise application security across web, mobile, API, microservices, and AI-native apps.
• Lead the selection, integration, and operation of AppSec tooling within CI/CD and developer platforms.
• Partner with architecture and platform teams to deliver security as native platform capabilities.
• Establish guardrails for AI-assisted development and secure adoption of AI tooling across engineering.

Skills

Technical leadership

Application Security

CI/CD

SAST

DAST

IAST/RASP

Cloud-native

Kubernetes

API security

SBOMs

DevSecOps

Security architecture

Executive communications

Threat modeling

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

GitHub Actions

GitLab CI

Jenkins

Argo

Job description

CVS Health is seeking a senior technology leader to shape the end-to-end application security strategy for a broad range of software, from web and mobile to AI-native systems. You will own tooling architecture, drive secure by design across CI/CD, and steer security decisions in a rapidly evolving vendor landscape.

The role emphasizes developer-native security controls, threat-informed risk management, and collaboration with DevSecOps and platform teams to raise the bar across the enterprise.