Senior Manager - Application Security Engineering
Core
Lead enterprise application security, vulnerability management, secure software delivery, and security engineering capabilities across a complex technology environment to protect CVS Health applications and platforms throughout the software development lifecycle.
Role type
Senior Manager, Application Security Engineering
Builds
Enterprise security programs, secure development standards, software supply chain security practices, and DevSecOps capabilities for cloud-native, hybrid, and legacy environments.
Domain
Healthcare / Cybersecurity / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Enterprise security program leadership, vulnerability management lifecycle, secure software development lifecycle (SDLC), cloud-native security (AWS/Azure/GCP), container and Kubernetes security, Infrastructure-as-Code (IaC), SAST/SCA/mobile security testing, software supply chain security, team leadership and mentoring, security automation, executive reporting and risk management.
Preferred skills
Enterprise application modernization, multi-cloud and hybrid architecture security, compliance frameworks (HIPAA/HITRUST/PCI-DSS/NIST), security transformation and automation initiatives, AI-powered security tools (Claude/Copilot) for vulnerability remediation and scanning.
Technologies
AWS, Azure, GCP, Kubernetes, SAST, SCA, CVA, SBOM, JFrog, Snyk, Veracode, Wiz, GitGuardian, Prisma Cloud, CI/CD pipelines, MCP-based security scanning.
Responsibilities
Lead design and governance of enterprise application security programs and secure development standards; oversee end-to-end vulnerability management lifecycle including remediation and exception management; drive adoption of secure coding practices and developer-focused security capabilities; lead automation of security controls within CI/CD pipelines; build and scale security programs to drive developer adoption and DevSecOps maturity; partner with Engineering, Product, and Compliance teams to define strategic roadmaps and support enterprise transformation initiatives.
Seniority
Senior Manager, hands-on leadership with strategic oversight