Senior DevSecOps Engineer: Secure Delivery & Automation

9025 CVS Shared Services Resources LLC; Massachusetts; Hybrid; USD 130,000 - 260,000; Full time

Job summary

9025 CVS Shared Services Resources LLC is seeking a senior security-focused DevSecOps engineer to translate security strategy into scalable automation across Health 100 initiatives. You will influence across application, platform, cloud and security teams to minimize risk and maximize delivery velocity.

Lead DevSecOps implementations, orchestrate CI/CD security controls, and drive major tooling migrations while mentoring engineers and aligning with business priorities.

Qualifications

• Experience integrating security controls into CI/CD pipelines.
• Proficiency with public cloud and container security concepts.
• Hands-on scripting in Python/Java/JavaScript/Go/Shell.
• Experience with open-source risk and software supply chain security.
• Ability to communicate security outcomes to senior leadership.

Responsibilities

• Lead DevSecOps initiatives aligned to security goals and engineering priorities.
• Design, implement and improve CI/CD security controls and automated scanning.
• Migrate and standardize security tooling across teams to reduce risk.
• Drive vulnerability remediation across Health 100 applications within SLAs.
• Improve open‑source visibility and SBOM coverage for supply chain security.
• Provide technical leadership and mentorship across security, platform, and dev teams.

Skills

SAST/SCA integration

Cloud security (AWS/Azure/GCP)

Docker & Kubernetes

Security-as-Code / IaC

CI/CD security tooling (Snyk/Checkmarx

Mobile app security testing

Security metrics & risk communication

Education

Bachelor's degree in Computer Science or Software Engineering

Tools

Snyk

Checkmarx

Gitleaks

SBOM tooling

Data Theorem

MobSF

Job description

9025 CVS Shared Services Resources LLC is seeking a senior security-focused DevSecOps engineer to translate security strategy into scalable automation across Health 100 initiatives. You will influence across application, platform, cloud and security teams to minimize risk and maximize delivery velocity.

Lead DevSecOps implementations, orchestrate CI/CD security controls, and drive major tooling migrations while mentoring engineers and aligning with business priorities.