Lead Application Security Engineer
CVS Health3 days ago
Base Salary
$130k - $261k/yr
Responsibilities
- Lead application security onboarding, secure-by-default implementation patterns, release-readiness activities, and DevSecOps adoption across the Health 100 portfolio.
- Drive security platform implementations, tooling modernization, configuration standardization, and enterprise adoption of scalable security solutions.
- Design and implement automated security controls, testing capabilities, policy enforcement mechanisms, and self-service security solutions within software delivery pipelines.
- Lead vulnerability remediation, software supply chain security, cloud security, container security, mobile application security, and enterprise risk reduction initiatives.
- Provide architecture guidance, mentor engineers, communicate security outcomes to leadership, and establish security engineering standards.
Requirements
- 7+ years of experience in application security engineering, DevSecOps, cloud security, platform security, or software engineering in complex enterprise environments.
- Deep expertise in application security testing, cloud security, container security, mobile application security, Infrastructure-as-Code security, and automated security enforcement.
- Proven success leading enterprise security implementations, application security platform migrations, and large-scale security modernization initiatives.
- Strong technical knowledge of AWS, Azure, or GCP, Kubernetes, Infrastructure-as-Code, Security-as-Code, and secure software development methodologies.
- Hands-on proficiency in modern programming and scripting languages, vulnerability management, software supply chain security, and enterprise risk reduction.
- Preferred experience with Wiz, Snyk, Checkmarx, Gitleaks, Data Theorem, MobSF, SBOM tooling, Snowflake, and regulated or healthcare environments.
- Familiarity with HIPAA, HITRUST, PCI DSS, NIST, GDPR, and CCPA frameworks.
- Bachelor's degree or equivalent work experience; alternatively, a high school diploma or GED plus 4 years of relevant experience.
Benefits
- Full-time position with medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources based on eligibility.
- Eligible for CVS Health bonus, commission or short-term incentive programs and an equity award target in addition to base pay.
- Application window anticipated to close on 12/31/2026.
Tech Stack
Categories
About CVS Health
CVS Health is a U.S. health care company that operates thousands of retail pharmacies, runs the CVS Caremark pharmacy benefits manager, and owns the Aetna health insurance business. It sells prescriptions, retail health goods, and insurance plans, and provides primary and urgent care through MinuteClinic and other services for consumers, employers, and government programs. Founded in 1963 and headquartered in Woonsocket, Rhode Island, it is a public company traded on the NYSE.