Senior DevSecOps Engineer: Security Automation & Enablement

CVS Health

Boston (MA)

On-site

USD 130,000 - 261,000

Full time

3 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Medical, dental, vision

Equity

Bonus eligibility

Job summary

CVS Health is seeking a Staff Engineer, DevSecOps Security Engineering, to lead secure engineering across the Health 100 portfolio. You will translate security strategy into scalable, automated solutions for release readiness, vulnerability remediation and secure-by-default delivery across teams.

The role requires deep expertise in application security, DevSecOps, and cloud security, with hands-on scripting and cloud proficiency.

Qualifications

7+ years of experience in DevSecOps, application security engineering or platform security.
Experience integrating SAST, SCA, secrets detection, container scanning or comparable controls into CI/CD pipelines.
Proficiency with public cloud platforms (AWS/Azure/GCP) and security concepts.
Hands-on scripting in languages such as Python, Java, JavaScript, Go, or Shell.
Experience with mobile application security testing and remediation.
Demonstrated ability to use metrics to drive adoption and measurable outcomes.

Responsibilities

Lead DevSecOps implementation initiatives aligned to security goals and engineering priorities.
Own technical planning, architecture, delivery, issue resolution and outcomes.
Design and improve CI/CD security controls, pipeline enforcement and automated scanning workflows.
Coordinate across application, platform and security teams to remove blockers and sustain adoption.
Automate secret-detection and CI/CD security workflows (e.g., Gitleaks).
Migrate security tools (Checkmarx to Snyk) and standardize tooling across teams.