Staff DevSecOps Engineer: Security Automation Leader - Equity-Eligible

CVS Health; Rhode Island; Hybrid; USD 130,000 - 261,000; Full time

Job summary

CVS Health is seeking a Staff Engineer for DevSecOps Security Engineering to lead security implementations, migration and automation across the Health 100 portfolio. You will translate security strategy into scalable engineering solutions, enforce CI/CD security controls and drive secure-by-default delivery across multiple teams.

The role requires hands-on engineering depth balanced with cross-functional influence, cloud security expertise and experience with mobile application security testing.

Qualifications

• 7+ years of experience in DevSecOps, application security engineering, platform security or software engineering.
• Experience integrating SAST, SCA, secrets detection, container scanning, IaC scanning into CI/CD pipelines.
• Experience leading security implementations or tool migrations in large or complex engineering environments.
• Proficiency in public cloud platforms such as AWS, Azure or GCP, plus cloud and network security concepts.
• Experience with Docker, Kubernetes, Security-as-Code and Infrastructure-as-Code.
• Hands-on scripting or programming experience in languages such as Python, Java, JavaScript, Go, Shell or PowerShell.
• Experience with application vulnerability management, open-source risk and software supply chain security.
• Experience with mobile application security testing, mobile threat modeling, or remediation of iOS and Android application security findings.
• Demonstrated ability to use metrics to drive adoption, remediation and measurable technical outcomes.

Responsibilities

• Lead DevSecOps implementation initiatives aligned to security goals and engineering priorities.
• Own technical planning, architecture, delivery, issue resolution and implementation outcomes.
• Coordinate across application, platform and security teams to remove blockers and sustain adoption.
• Design, implement and improve CI/CD security controls, pipeline enforcement and automated scanning workflows.
• Partner with development and platform teams to embed security controls without delivery friction.
• Build self-service security solutions and reusable automation that reduce manual intervention.
• Automate secret-detection and CI/CD security workflows, including Gitleaks or comparable capabilities.
• Lead security-tool migrations and standardize tooling configurations across teams.
• Drive remediation of critical and high-risk vulnerabilities across Health 100 applications with SLAs.
• Monitor remediation against SLAs and identify aging, recurrence and systemic issues.
• Lead prioritization of high-impact open-source and software supply chain exposures.

Skills

DevSecOps

Application security

Automation

Secure delivery

SAST/SCA

Container scanning

IaC scanning

Cloud security

Mobile security testing

Education

Bachelor's degree in Computer Science/Software

Tools

Docker

Kubernetes

Checkmarx

Snyk

Gitleaks

SBOM tooling

Job description

CVS Health is seeking a Staff Engineer for DevSecOps Security Engineering to lead security implementations, migration and automation across the Health 100 portfolio. You will translate security strategy into scalable engineering solutions, enforce CI/CD security controls and drive secure-by-default delivery across multiple teams.

The role requires hands-on engineering depth balanced with cross-functional influence, cloud security expertise and experience with mobile application security testing.