Staff DevSecOps Security Engineer & Automation Leader

Socket.dev; Massachusetts; On-site; USD 130,000 - 261,000; Full time

Job summary

CVS Health is seeking a Staff Engineer, DevSecOps Security Engineering to lead security implementation, migration, automation, and mobile testing across the Health 100 portfolio. You will translate security strategy into scalable engineering patterns that strengthen release readiness and enable secure-by-default delivery.

You will partner with application, platform and security teams to reduce vulnerabilities, drive remediation, and improve testing coverage while maintaining delivery velocity.

Qualifications

• 7+ years of experience in DevSecOps, application security engineering, platform security or software engineering.
• Experience integrating SAST, SCA, secrets detection, container scanning, IaC scanning into CI/CD pipelines.
• Experience leading security implementations or tool migrations in large or complex engineering environments.
• Proficiency in public cloud platforms (AWS/Azure/GCP) and cloud/security concepts.
• Experience with Docker, Kubernetes, Security‑as‑Code and Infrastructure‑as‑Code.
• Hands-on scripting or programming in Python, Java, JavaScript, Go, Shell or PowerShell.
• Experience with application vulnerability management, open-source risk and software supply chain security.
• Experience with mobile application security testing and remediation of iOS/Android findings.
• Ability to use metrics to drive adoption, remediation and measurable outcomes.

Responsibilities

• Lead DevSecOps implementation initiatives aligned to security goals and engineering priorities.
• Own technical planning, architecture, delivery, issue resolution and outcomes.
• Coordinate across teams to remove blockers and sustain adoption.
• Design, implement and improve CI/CD security controls and automated scanning workflows.
• Build self-service security solutions and reusable automation to reduce manual effort.
• Automate secret detection and CI/CD security workflows.
• Lead security‑tool migrations and standardization across development teams.
• Monitor remediation against SLAs and drive risk reduction across Health 100 apps.
• Drive secure‑by‑default dependency usage and SBOM coverage.
• Engineer controls for cloud, container and IaC environments.

Skills

DevSecOps

Application security

Automation

Security engineering

Scripting

Metrics-driven

Education

Bachelor's degree in Computer Science, Software Development, Software Engineering or related field

Tools

Snyk

Checkmarx

Gitleaks

SBOM tooling

Docker

Kubernetes

Job description

CVS Health is seeking a Staff Engineer, DevSecOps Security Engineering to lead security implementation, migration, automation, and mobile testing across the Health 100 portfolio. You will translate security strategy into scalable engineering patterns that strengthen release readiness and enable secure-by-default delivery.

You will partner with application, platform and security teams to reduce vulnerabilities, drive remediation, and improve testing coverage while maintaining delivery velocity.