Distinguished Engineer – Application Security

Job not on LinkedIn

🔥 3 hours ago

🌵 Arizona – Remote

🌵 Arizona – Remote

💵 $175.1k - $334.8k / year

⏰ Full Time

🟠 Senior

🔴 Lead

💻 Application Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

CVS Health Careers

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

🛒 Retail

📦 Logistics

Healthcare • Retail • Logistics

CVS Health Careers is the recruitment and employer branding arm of CVS Health, showcasing job opportunities across the company's broad operations—pharmacy retail stores, pharmacy services, health care clinics, distribution warehouses, corporate functions and transportation. The careers site emphasizes purpose-driven work focused on improving access, affordability and quality of health care, and highlights a large workforce (300,000+ employees), inclusive culture, benefits, and hiring resources for applicants.

📋 Description

• Define enterprise Application Security strategy and secure AI adoption at CVS Health • Set architectural direction for securing web, mobile, API, microservice, and AI-native applications across cloud, on-premises, SaaS, and hybrid environments • Partner with the AVP of Application Security to deliver an industry-leading application security program • Shift security responsibility left into design and development, enforce controls through CI/CD, and validate them continuously in production • Own the technical strategy and end-to-end architecture of the application security tooling stack • Lead tool selection, evaluation, integration planning, build-versus-buy decisions, and tool consolidation into an ASPM view • Serve as the responsible architect for Application Security team components, tools, services, and CI/CD integrations • Set design standards, lead design reviews, and contribute hands-on to critical components • Support application teams adopting security standards and tooling • Establish guardrails for AI coding assistants, agentic coding tools, and AI-generated code • Evaluate and integrate AI-native application security tooling • Address risks including insecure generated code, prompt injection, model and prompt supply-chain exposure, and IP/data leakage • Partner with Developer Experience and Security Engineering teams to deliver secure-by-default paved paths and developer-facing capabilities • Define secure coding standards mapped to OWASP ASVS and NIST SSDF • Establish outcome-based metrics translating application security posture into business risk • Influence strategy, investment, and execution across organizational boundaries

🎯 Requirements

• 15+ years of experience in technical roles • 10+ years bridging deep technical work and business strategy • 10+ years of hands-on software engineering across multiple language ecosystems, with current coding proficiency • 8+ years in enterprise-scale application security or product security roles • 5+ years setting multi-year technical strategy and architectural roadmaps for enterprise AppSec or DevSecOps programs • Deep knowledge of SAST, DAST, SCA, IAST/RASP, secrets scanning, API security, container and IaC scanning, and ASPM/ASOC • Experience integrating security controls into CI/CD pipelines and developer platforms • Knowledge of SBOMs, CycloneDX, SPDX, SLSA, provenance, attestation, dependency and license governance, and build-system hardening • Familiarity with Kubernetes, serverless, microservices, REST, GraphQL, gRPC, and event-driven architectures • Experience transforming application security programs to developer-native, control-driven continuous operations • Experience partnering with platform engineering or developer experience teams • Strong written and verbal communication, including briefing executive leadership and the board • Bachelor's degree in Computer Science, Engineering, or a related field, or related experience • Preferred: current experience with AI-assisted software development and AI coding assistants • Preferred: experience with AI-native application security tooling • Preferred: knowledge of OWASP LLM Top 10, OWASP AI Security & Privacy Guide, MITRE ATLAS, and NIST AI RMF • Preferred: ASPM platform experience • Preferred: healthcare-sector application security experience and knowledge of HIPAA, FDA cybersecurity guidance, PCI DSS, SEC cyber-incident disclosure rules, and NIST CSF • Preferred: runtime application security experience • Preferred: industry certifications such as CISSP, CSSLP, OSWE, OSCP, GIAC, or equivalent • Preferred: advanced degree in Computer Science, Software Engineering, or related technical field

🏖️ Benefits

• CVS Health bonus, commission or short-term incentive program • Award target in the company’s equity award program • Medical coverage • Dental coverage • Vision coverage • Paid time off • Retirement savings options • Wellness programs • Other resources supporting physical, emotional, and financial well-being

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume