Senior Manager, App Security & Secure DevOps

Koitecc Solutions; Massachusetts; On-site; USD 118,000 - 261,000; Full time

Job summary

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise security programs across a complex technology environment. You will oversee app security, vulnerability management, secure software delivery, and security automation, partnering with multiple teams to embed security in the SDLC.

The role focuses on building scalable security capabilities, security standards, and DevSecOps maturity across teams, with a remote U.S. based work arrangement.

Qualifications

• Experience building and operating enterprise security technologies across several domains.
• Proven leadership of security programs from design through continuous improvement.
• Hands-on expertise securing cloud-native environments (AWS/Azure/GCP) and DevSecOps.
• Experience with SDLC, vulnerability management, compliance, and secure software delivery.
• Experience with application security tooling and developer enablement programs.

Responsibilities

• Lead enterprise application security programs, secure development standards, and software supply chain practices.
• Define requirements, done criteria, and automated controls for secure delivery across environments.
• Drive adoption of secure coding and developer-focused security capabilities.
• Oversee vulnerability management lifecycle and executive reporting.
• Lead security automation in CI/CD pipelines and modern security technologies.
• Partner with Engineering, Product, Architecture, Infrastructure, Risk, Compliance, and Cybersecurity.

Skills

Application Security

Container Security

Cloud Security

Security Operations

DevSecOps

Automation

Security Engineering

Education

Bachelor's degree

Tools

SAST

SCA

SBOM

CI/CD security

JFrog

Snyk

Veracode

Wiz

GitGuardian

Prisma Cloud

Job description

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise security programs across a complex technology environment. You will oversee app security, vulnerability management, secure software delivery, and security automation, partnering with multiple teams to embed security in the SDLC.

The role focuses on building scalable security capabilities, security standards, and DevSecOps maturity across teams, with a remote U.S. based work arrangement.