Lead Application Security Engineer

CVS Health is seeking a Lead Application Security Engineer to lead application security engineering initiatives across the Health 100 portfolio and help advance secure software delivery at enterprise scale.

The Lead Application Security Engineer will serve as a senior technical leader responsible for strengthening application security, improving engineering efficiency through automation, and enabling development teams to adopt secure-by-default practices throughout the software development lifecycle.

Working across application, cloud, platform, and security organizations, the Lead Application Security Engineer will drive strategic security initiatives, establish scalable engineering patterns, and influence the adoption of modern security practices that improve risk reduction, release readiness, and overall technology resilience.

The Lead Application Security Engineer will partner closely with engineering teams to implement enterprise security capabilities, accelerate adoption of DevSecOps practices, and strengthen security outcomes across a high-priority application portfolio.

This position offers the opportunity to influence enterprise-wide application security and DevSecOps strategy, shape modern security engineering practices, and deliver measurable business and security outcomes across one of CVS Health's most strategic application portfolios.

Primary Responsibilities:

• Lead application security onboarding, secure-by-default implementation patterns, release-readiness activities, and adoption of secure software development and DevSecOps practices across the Health 100 portfolio.
• Drive security platform implementations, tooling modernization efforts, configuration standardization, and enterprise adoption of scalable security solutions.
• Design and implement automated security controls, testing capabilities, policy enforcement mechanisms, and self-service security solutions within software delivery pipelines.
• Lead vulnerability remediation, software supply chain security, cloud security, container security, and mobile application security initiatives.
• Serve as a senior technical leader by providing architecture guidance, mentoring engineers, communicating security outcomes to leadership, and establishing security engineering standards.

Required Qualifications:

• 7+ years of experience in application security engineering, DevSecOps, cloud security, platform security, or software engineering within complex enterprise environments.
• Deep expertise implementing security controls throughout modern software delivery pipelines.
• Proven success leading enterprise security implementations, application security platform migrations, and large-scale security modernization initiatives.
• Strong technical knowledge of AWS, Azure, or GCP, Kubernetes, Infrastructure-as-Code, Security-as-Code, and secure software development methodologies.
• Hands-on proficiency in modern programming and scripting languages.

Preferred Qualifications:

• Hands-on experience with application security, cloud security, and container security platforms.
• Background supporting large-scale application portfolios, highly regulated environments, or complex multi-team technology organizations.
• Experience securing cloud-native data platforms and analytics environments.
• Familiarity with healthcare, privacy, and security frameworks.

Benefits:

• Medical, dental, and vision coverage
• Paid time off
• Retirement savings options
• Wellness programs
• Other resources, based on eligibility