Staff DevSecOps Engineer - Security Automation Leader

CVS Health; Rhode Island; Hybrid; USD 130,000 - 261,000; Full time

Benefits offered by this job

Health benefits

Career growth

Job summary

CVS Health is seeking a Staff Engineer, DevSecOps Security Engineering to lead security implementation, migration and automation across the Health 100 portfolio. This role translates security strategy into scalable engineering patterns that strengthen release readiness and broaden mobile and application security testing coverage.

You will mentor engineers, build reusable tooling and drive cross‑functional collaboration across application, platform, cloud and security teams to deliver

Qualifications

• 7+ years of experience in DevSecOps, application security, platform security or software engineering.
• Experience integrating SAST, SCA, secrets detection, container scanning, IaC scanning into CI/CD pipelines.
• Experience leading security implementations or tool migrations in large or complex engineering environments.
• Proficiency in public cloud platforms such as AWS, Azure or GCP, plus cloud and network security concepts.
• Experience with Docker, Kubernetes, Security-as-Code and Infrastructure-as-Code.
• Hands-on scripting or programming experience in languages such as Python, Java, JavaScript, Go, Shell or PowerShell.
• Experience with application vulnerability management, open-source risk and software supply chain security.
• Experience with mobile application security testing, mobile threat modeling, or remediation of iOS and Android application security findings.
• Demonstrated ability to use metrics to drive adoption, remediation and measurable technical outcomes.

Responsibilities

• Health 100 Security Enablement: onboarding and security enablement for Health 100 initiatives; standard tooling and repeatable implementation patterns.
• Security Implementation & Major Initiatives: lead DevSecOps implementation initiatives; own planning, architecture and delivery outcomes.
• Pipeline Enforcement & Automation: design, implement and improve CI/CD security controls and automated scanning workflows.
• Security Tool Migration & Standardization: lead security-tool migrations and standardize tooling across teams.
• Vulnerability Reduction & SLA Compliance: drive remediation of high-risk vulnerabilities and monitor SLAs.
• Supply Chain, Cloud & Container Security: improve SBOM coverage and secure-by-default dependencies; manage cloud, container and IaC security.
• Metrics, Reporting & Continuous Improvement: track coverage, remediation effectiveness and adoption; provide executive-ready updates.
• Technical Leadership & Knowledge Enablement: mentor engineers and create reusable security patterns.

Skills

DevSecOps

Application security

Automation

Security testing

Cloud security

Scripting

Education

Bachelor's degree in Computer Science or related field

Tools

Snyk

Checkmarx

Gitleaks

SBOM tooling

Data Theorem

MobSF

Job description

CVS Health is seeking a Staff Engineer, DevSecOps Security Engineering to lead security implementation, migration and automation across the Health 100 portfolio. This role translates security strategy into scalable engineering patterns that strengthen release readiness and broaden mobile and application security testing coverage.

You will mentor engineers, build reusable tooling and drive cross‑functional collaboration across application, platform, cloud and security teams to deliver