Senior Manager, App Security & DevSecOps

Koitecc Solutions; New York (NY); On-site; USD 118,000 - 261,000; Full time

Job summary

CVS Health is seeking a Senior Manager of Application Security Engineering to lead enterprise application security programs, vulnerability management, and secure software delivery across a complex technology landscape.

You will partner with Engineering, Architecture, Risk, Compliance, and Cybersecurity teams to embed security into development and scale DevSecOps capabilities, including SBOM and software supply chain security.

Qualifications

• 7+ years of experience developing, implementing, and operating enterprise security technologies.
• 7+ years of experience leading security programs in enterprise environments.
• 5+ years of experience securing cloud-native environments across AWS, Azure, or GCP.
• 4+ years of experience with application security technologies including SAST, SCA, and SBOM.

Responsibilities

• Lead the design, implementation, and governance of enterprise application security programs and secure development standards.
• Establish security requirements, definitions of done, launch readiness criteria, and automated controls for secure delivery across environments.
• Drive adoption of secure coding practices and developer-focused security capabilities across engineering organizations.
• Oversee vulnerability management lifecycle, including identification, prioritization, remediation, and reporting.
• Lead automation of security controls within CI/CD pipelines to improve efficiency and secure software delivery.

Skills

Application Security

Security Leadership

Vulnerability Management

DevSecOps

Security Automation

Cloud Security

Team Leadership

Strategic Planning

Education

Bachelor's degree

Tools

SAST

SCA

SBOM

JFrog

Veracode

Prisma Cloud

Kubernetes

Job description

CVS Health is seeking a Senior Manager of Application Security Engineering to lead enterprise application security programs, vulnerability management, and secure software delivery across a complex technology landscape.

You will partner with Engineering, Architecture, Risk, Compliance, and Cybersecurity teams to embed security into development and scale DevSecOps capabilities, including SBOM and software supply chain security.