Senior Manager, Application Security & DevSecOps

Hispanic Alliance for Career Enhancement; Town of Texas (WI); Hybrid; USD 118,450 - 260,590; Full time

Job summary

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security programs across a complex technology landscape. You will drive secure software delivery, vulnerability management, and security engineering capabilities partnering with Engineering and Product teams.

REMOTE opportunity for candidates based in the United States. The role emphasizes DevSecOps maturity, security automation, SBOM, and cloud-native security across on-prem, cloud, and

Qualifications

• 7+ years of experience developing, implementing, and operating enterprise security technologies across multiple domains.
• 7+ years leading security programs from design to operationalization in enterprise environments.
• 5+ years securing cloud-native environments using AWS/Azure/GCP with containers and IaC.
• 5+ years supporting secure SDLC, vulnerability management, compliance, and enterprise app portfolios.
• 4+ years with application security tech including SAST, SCA, SBOM, and developer enablement.
• 2+ years leading and developing security teams.

Responsibilities

• Lead the design, implementation and governance of enterprise application security programs.
• Establish security requirements, definitions of done, and automated controls for secure delivery.
• Drive adoption of secure coding practices across enterprise engineering teams.
• Oversee vulnerability management lifecycle and executive reporting.
• Lead DevSecOps adoption with CI/CD automation and secure software delivery.
• Partner with cross-functional teams to define strategic security roadmaps and metrics.

Skills

Application security

Vulnerability management

DevSecOps

Cloud security

Security automation

Leadership

Threat modeling

Education

Bachelor's degree

Tools

JFrog

Snyk

Veracode

Wiz

GitGuardian

Prisma Cloud

Job description

CVS Health is seeking a Senior Manager, Application Security Engineering to lead enterprise application security programs across a complex technology landscape. You will drive secure software delivery, vulnerability management, and security engineering capabilities partnering with Engineering and Product teams.

REMOTE opportunity for candidates based in the United States. The role emphasizes DevSecOps maturity, security automation, SBOM, and cloud-native security across on-prem, cloud, and