Senior Architect, Application Security & Platform Strategy

9025 CVS Shared Services Resources LLC; Arizona; Hybrid; USD 180,000 - 280,000; Full time

Job summary

CVS Health is seeking a senior technical leader for Application Security to define the architectural direction across web, mobile, API, microservices, and AI-native apps. You will own the ASPM stack, drive secure development practices, and partner with DevEx to embed security into the developer experience.

You will influence across technical and executive audiences, lead multi-year security roadmaps, and guide tool selection and integration in a rapidly evolving vendor landscape.

Qualifications

• 15+ years in technical roles with demonstrated ability to influence across technical and executive audiences
• 10+ years bridging deep technical work and business strategy, translating between the two fluently
• 10+ years hands-on software engineering across multiple languages with current coding proficiency
• 8+ years in application security or product security at enterprise scale with threat modeling and secure code review
• 5+ years setting multi-year technical strategy and architectural roadmaps for enterprise-scale AppSec/DevSec

Responsibilities

• Define and drive the architectural direction for enterprise application security across web, mobile, API, and AI-native apps
• Own the ASPM tooling stack, including SAST/DAST/IAST+RASP, secrets, API security, and IaC scanning
• Lead tool selection, evaluation, and integration within CI/CD and Developer Experience platforms
• Serve as senior architect for AppSec components and reusable CI/CD integrations
• Provide hands-on support to teams adopting secure coding standards and tooling
• Chart AI-assisted secure development strategy and manage AI tooling adoption risks
• Collaborate with Developer Experience and Security peers to ensure end-to-end secure pipelines

Skills

Java

C#

JavaScript/TypeScript

Python

Go

Job description

CVS Health is seeking a senior technical leader for Application Security to define the architectural direction across web, mobile, API, microservices, and AI-native apps. You will own the ASPM stack, drive secure development practices, and partner with DevEx to embed security into the developer experience.

You will influence across technical and executive audiences, lead multi-year security roadmaps, and guide tool selection and integration in a rapidly evolving vendor landscape.