VP, Application Security Strategy & Engineering

Hispanic Alliance for Career Enhancement; Arizona; Hybrid; USD 185,400 - 375,950; Full time

Job summary

CVS Health is seeking a polished and experienced security leader to serve as Associate Vice President of Application Security, responsible for defining and executing the enterprise strategy for securing software across its full development lifecycle. This role owns the policies, technical standards, and tooling that enable CVS Health's engineering teams to build and deploy secure applications at scale.

The AVP will lead a high-performing team of application security engineers and architects,

Qualifications

• 12+ years of information security experience, with at least 5 years in application security leadership.
• Hands-on coding experience in modern programming languages and security-focused development.
• Deep knowledge of SAST, DAST, SCA, and WAF with experience embedding security into CI/CD.

Responsibilities

• Define and own the enterprise application security strategy, roadmap, and policy framework.
• Lead SDLC integration, static/dynamic testing, and policy enforcement in CI/CD pipelines.
• Oversee WAF management, SCA program, and code-repository scanning across the org.
• Provide executive-level risk reporting and governance dashboards on security posture.
• Foster collaboration with DevEx, Legal, Compliance, and business units to embed security.

Skills

Application security leadership

SAST

DAST

WAF

SCA

CI/CD security

Security governance

Executive communication

Education

Bachelor's Degree

Tools

Code scanning tooling

Vulnerability management

Job description

CVS Health is seeking a polished and experienced security leader to serve as Associate Vice President of Application Security, responsible for defining and executing the enterprise strategy for securing software across its full development lifecycle. This role owns the policies, technical standards, and tooling that enable CVS Health's engineering teams to build and deploy secure applications at scale.

The AVP will lead a high-performing team of application security engineers and architects,