Senior DevSecOps Engineer: Security Automation & Enablement

CVS Health; Boston (MA); On-site; USD 130,000 - 261,000; Full time

Benefits offered by this job

Medical, dental, vision

Equity

Bonus eligibility

Job summary

CVS Health is seeking a Staff Engineer, DevSecOps Security Engineering, to lead secure engineering across the Health 100 portfolio. You will translate security strategy into scalable, automated solutions for release readiness, vulnerability remediation and secure-by-default delivery across teams.

The role requires deep expertise in application security, DevSecOps, and cloud security, with hands-on scripting and cloud proficiency.

Qualifications

• 7+ years of experience in DevSecOps, application security engineering or platform security.
• Experience integrating SAST, SCA, secrets detection, container scanning or comparable controls into CI/CD pipelines.
• Proficiency with public cloud platforms (AWS/Azure/GCP) and security concepts.
• Hands-on scripting in languages such as Python, Java, JavaScript, Go, or Shell.
• Experience with mobile application security testing and remediation.
• Demonstrated ability to use metrics to drive adoption and measurable outcomes.

Responsibilities

• Lead DevSecOps implementation initiatives aligned to security goals and engineering priorities.
• Own technical planning, architecture, delivery, issue resolution and outcomes.
• Design and improve CI/CD security controls, pipeline enforcement and automated scanning workflows.
• Coordinate across application, platform and security teams to remove blockers and sustain adoption.
• Automate secret-detection and CI/CD security workflows (e.g., Gitleaks).
• Migrate security tools (Checkmarx to Snyk) and standardize tooling across teams.

Skills

DevSecOps

Application security

Cloud security

Kubernetes

Docker

Scripting

Education

Bachelor's degree in Computer Science / CS-related field

Tools

Snyk

Checkmarx

Gitleaks

SBOM tooling

Job description

CVS Health is seeking a Staff Engineer, DevSecOps Security Engineering, to lead secure engineering across the Health 100 portfolio. You will translate security strategy into scalable, automated solutions for release readiness, vulnerability remediation and secure-by-default delivery across teams.

The role requires deep expertise in application security, DevSecOps, and cloud security, with hands-on scripting and cloud proficiency.