Staff DevSecOps Engineer, Health

Job not on LinkedIn

🕒 6 days ago

🦌 Connecticut, New York, +2 more states – Remote

🦌 Connecticut – Remote 🗽 New York – Remote 🍂 Massachusetts – Remote ⚓ Rhode Island – Remote

💵 $130.3k - $260.6k / year

⏰ Full Time

🔴 Lead

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CVS Health

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1963

🏥 Healthcare

⚕️ Healthcare Insurance

🛒 Retail

Healthcare • Healthcare Insurance • Retail

CVS Health is a leading American healthcare company dedicated to improving health access and affordability. The company focuses on a comprehensive approach that includes health services, health insurance, and pharmacy benefits management. Through its subsidiaries, such as Aetna and CVS Caremark, CVS Health offers a range of services that facilitate wellness, condition management, and affordable prescription drug coverage. CVS Health operates neighborhood pharmacies, provides mail-order pharmacy services, and manages specialty medication programs, aiming to make healthcare convenient and accessible for everyone. Driven by a mission to connect people with essential care services, CVS Health is committed to fostering healthier communities and supporting the wellbeing of all individuals.

📋 Description

• Lead technical implementation, migration, automation, mobile application security and standardization across the Health 100 portfolio • Support application onboarding and security enablement for Health 100 initiatives • Help development teams meet security requirements through standard tooling, pipeline integration and repeatable implementation patterns • Translate release-readiness expectations into repeatable technical patterns and evidence • Enable mobile application security testing, secure configuration validation and remediation guidance • Lead DevSecOps implementation initiatives, including technical planning, architecture, delivery, issue resolution and implementation outcomes • Coordinate across application, platform and security teams to remove blockers and sustain adoption • Design, implement and improve CI/CD security controls, pipeline enforcement and automated scanning workflows • Build self-service security solutions and reusable automation • Automate secret-detection and CI/CD security workflows, including Gitleaks or comparable capabilities • Lead security-tool migrations such as Checkmarx to Snyk through stable production operation • Produce and validate post-migration scan results • Standardize tooling configurations across development teams • Drive remediation of critical and high-risk vulnerabilities and monitor remediation against SLAs • Lead prioritization of open-source and software supply chain exposures • Improve SBOM coverage and secure-by-default dependency usage • Engineer controls for public cloud, containers, Kubernetes, Security-as-Code and Infrastructure-as-Code environments • Apply network-security, cloud-architecture and mobile-security expertise to assess risks and guide remediation • Track and report scan coverage, mobile testing coverage, vulnerability aging, SLA adherence, remediation effectiveness, automation adoption, tool coverage and pipeline compliance • Provide executive-ready updates on implementation progress, delivery risk and measurable security outcomes • Mentor engineers, establish reusable engineering patterns and create implementation guidance and education

🎯 Requirements

• 7+ years of experience in DevSecOps, application security engineering, platform security or software engineering • Experience integrating SAST, SCA, secrets detection, container scanning, IaC scanning or comparable security controls into CI/CD pipelines • Experience leading security implementations or tool migrations in large or complex engineering environments • Proficiency in public cloud platforms such as AWS, Azure or GCP, plus cloud and network security concepts • Experience with Docker, Kubernetes, Security-as-Code and Infrastructure-as-Code • Hands-on scripting or programming experience in Python, Java, JavaScript, Go, Shell or PowerShell • Experience with application vulnerability management, open-source risk and software supply chain security • Experience with mobile application security testing, mobile threat modeling, or remediation of iOS and Android application security findings • Demonstrated ability to use metrics to drive adoption, remediation and measurable technical outcomes • Bachelor's degree in Computer Science, Software Development, Software Engineering or a related field, or equivalent practical experience • Preferred: experience with portfolio-based initiatives or prioritized application sets such as Health 100 • Preferred: hands-on experience with Snyk, Checkmarx, Gitleaks, SBOM tooling or comparable platforms • Preferred: hands-on experience with Data Theorem, MobSF or comparable mobile testing tools • Preferred: expertise architecting public cloud security solutions and scalable engineering processes • Preferred: strong understanding of networking and Software-Defined Networking principles • Preferred: experience with security solutions for data warehouses or big-data platforms, including Snowflake • Preferred: familiarity with HIPAA, HITRUST, PCI, NIST, GDPR or CCPA • Preferred: experience communicating technical security outcomes and risk posture to senior leadership

🏖️ Benefits

• CVS Health bonus, commission or short-term incentive program in addition to base pay • Equity award program • Medical coverage • Dental coverage • Vision coverage • Paid time off • Retirement savings options • Wellness programs • Other resources supporting physical, emotional, and financial well-being