This role pays more than
65%
of similar roles. Most pay
$129,200–$216,000
— the shaded band above.
At the midpoint, this role pays about
$195k
versus about
$173k
for comparable roles.
Based on 240 similar postings.
Employer
About CVS Health
CVS Health is a leading American healthcare company operating retail pharmacies, pharmacy benefit management services, and a health insurance segment through Aetna, one of the nation''s largest health insurers. Industry: Healthcare & Pharmacy
CVS Health currently has
81 open roles
on FindRole.
Listed pay typically runs
$106,605–$260,590
across 80 roles with salary data.
Staff DevSecOps Engineer (Health 100)
The Staff DevSecOps Engineer leads technical implementation, migration, automation, mobile application security, and standardization across the Health 100 portfolio. This role translates security strategy into scalable engineering solutions to improve release readiness, vulnerability remediation, and secure-by-default delivery. Responsibilities include designing CI/CD security controls, managing tool migrations from Checkmarx to Snyk, automating secret detection with Gitleaks, and ensuring SBOM coverage for software supply chain security. The engineer manages risks across public cloud platforms like AWS, Azure, or GCP, while securing containerized environments using Docker and Kubernetes. Key technical requirements include proficiency in Python, Java, JavaScript, Go, Shell, or PowerShell, alongside expertise in Infrastructure-as-Code and Security-as-Code. This role addresses the challenge of balancing security enforcement with developer efficiency by providing automated tools and clear remediation guidance for high-risk vulnerabilities across a complex application ecosystem.
Lead technical implementation of DevSecOps initiatives, including security tool migrations and infrastructure automation across the Health 100 portfolio.
Design and implement automated CI/CD security controls, secret detection workflows, and self-service tools to reduce manual effort.
Standardize security tooling configurations and pipeline requirements across multiple development teams to ensure consistent policy alignment.
Drive the remediation of high-risk vulnerabilities and manage software supply chain risks through SBOM coverage and dependency management.
Engineer security controls for cloud environments, including Kubernetes, container security, and Infrastructure-as-Code (IaC) implementations.
Perform mobile application security testing and provide specific remediation guidance for iOS and Android platforms.
Track and report key metrics regarding scan coverage, vulnerability aging, and SLA compliance to senior leadership.
Serve as a technical authority by mentoring engineers and creating reusable patterns to foster developer self-service.
What we're looking for
Bachelor's degree in Computer Science, Software Development, Software Engineering, or a related field, or equivalent practical experience.
7+ years of experience in DevSecOps, application security engineering, platform security, or software engineering.
Experience integrating SAST, SCA, secrets detection, container scanning, IaC scanning, or comparable controls into CI/CD pipelines.
Experience leading security implementations or tool migrations in large or complex engineering environments.
Proficiency in public cloud platforms (AWS, Azure, or GCP) and experience with Docker, Kubernetes, Security-as-Code, and Infrastructure-as-Code.
Hands-on scripting or programming experience in languages such as Python, Java, JavaScript, Go, Shell, or PowerShell.
Experience with application vulnerability management, open-source risk, software supply chain security, and mobile application security testing for iOS and Android.
Demonstrated ability to use metrics to drive adoption, remediation, and measurable technical outcomes.
Experience with specific tools like Snyk, Checkmarx, Gitleaks, or SBOM tooling (preferred).
Experience with mobile security platforms such as Data Theorem or MobSF (preferred).
Expertise in architecting public cloud security solutions and understanding of networking/SDN principles (preferred).
Familiarity with regulated environments such as HIPAA, HITRUST, PCI, NIST, GDPR, or CCPA (preferred).
Remote (New York, NY)+314 days ago
$130,295–$284,280
Power BI
Microsoft Fabric
SharePoint
Microsoft Excel
Microsoft 365
Cybersecurity
Infrastructure Management
KPI Frameworks
Risk Management
Compliance
Data Visualization
Strategic Planning
Lean Six Sigma
CISSP
CISM
PMP
Security+
Azure
AKS
Terraform
Ansible
GitLab CI
CI/CD
SAST
DAST
Model Context Protocol
Microsoft Entra ID
OAuth 2.0
OpenID Connect
RAG
LLM
Azure App Service
Container Apps