[Hiring] Staff DevSecOps Engineer @CVS Health

Role Description

The Staff Engineer, DevSecOps Security Engineering, is responsible for leading technical implementation, migration, automation, mobile application security and standardization across the Health 100 portfolio. This role translates application security strategy into scalable engineering solutions that strengthen release readiness, improve vulnerability remediation, expand security and mobile testing coverage, and enable secure-by-default delivery across engineering teams.

Qualifications

• 7+ years of experience in DevSecOps, application security engineering, platform security or software engineering.
• Experience integrating SAST, SCA, secrets detection, container scanning, IaC scanning or comparable security controls into CI/CD pipelines.
• Experience leading security implementations or tool migrations in large or complex engineering environments.
• Proficiency in public cloud platforms such as AWS, Azure or GCP, plus cloud and network security concepts.
• Experience with Docker, Kubernetes, Security-as-Code and Infrastructure-as-Code.
• Hands-on scripting or programming experience in languages such as Python, Java, JavaScript, Go, Shell or PowerShell.
• Experience with application vulnerability management, open-source risk and software supply chain security.
• Experience with mobile application security testing, mobile threat modeling, or remediation of iOS and Android application security findings.
• Demonstrated ability to use metrics to drive adoption, remediation and measurable technical outcomes.

Requirements

• A senior technical employee with deep expertise in application security, DevSecOps, automation and secure delivery practices.
• Experienced translating security strategy into implementations that development teams can adopt consistently.
• Strong in automation, tooling integration and process improvement that reduce manual effort and improve engineering outcomes.
• Comfortable using metrics to communicate technical risk, delivery progress and measurable outcomes.
• Able to balance hands-on engineering depth with cross-functional influence across application, platform, cloud and security teams.

Benefits

• Comprehensive and competitive mix of pay and benefits.
• Medical, dental, and vision coverage.
• Paid time off.
• Retirement savings options.
• Wellness programs and other resources, based on eligibility.