Job Description

CVS Digital is looking for a talented software security professional with a deep technical background and experience navigating the wonderful world of software security and vulnerability management. Experience working as part of a team is critical, with a passion for optimizing security posture within consumer applications, cloud environments, and the SDLC.

Responsibilities:

Enforce and facilitate security requirements for development teams
Coach and provide software security training to development teams
Peer-review reports generated by SAST/DAST tools
Triage defects to the appropriate scrum team
Assist Product Owners with monitoring and tracking of defects according to company policy
Attend and participate in Scrum ceremonies
Maintain effective relationships with various audience levels. Escalate issues requiring resolution on a timely basis.

Day in the Life of this role

Daily standup meeting
Collaboration with team members on various work tasks
Potential to need to handle false positive reviews
Potential to need to answer security-related questions from various developer teams
Learn new skills and help create new internal processes for the team
Collaborate with people in other security teams on various problems and items
Potentially do some data analysis related to security vulnerability scan data
Potentially do some data analysis related to risk scoring and other data to help analyze security posture of developer teams

Pay Range

The typical pay range for this role is:

Minimum: $ 70,000

Maximum: $ 140,000

Please keep in mind that this range represents the pay range for all positions in the job grade within which this position falls. The actual salary offer will take into account a wide range of factors, including location.

Required Qualifications

3+ year of software development experience

Preferred Qualifications

Experience with CI/CD build tools (Bamboo, Jenkins, CircleCI, etc.)
Experience with various programming languages such as Python, Java, Ruby, and Node
Software security experience with backend services, API’s, or front-end applications (native mobile and web)
An understanding of application deployment patterns and best practices
An understanding and use of cloud and software security standards and best practices such as CIS, OWASP, BSIMM, NIST
An ability to clearly and effectively provide, and communicate opportunities and/or strategies for improvement
Experience with microservices architecture (Docker)
Experience working in an Agile SCRUM (or SAFe) SDLC

Education

Bachelor’s degree or equivalent experience.

Business Overview

Bring your heart to CVS Health

Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand — with heart at its center — our purpose sends a personal message that how we deliver our services is just as important as what we deliver.

Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable.

We strive to promote and sustain a culture of diversity, inclusion and belonging every day.

CVS Health is an affirmative action employer, and is an equal opportunity employer, as are the physician-owned businesses for which CVS Health provides management services. We do not discriminate in recruiting, hiring, promotion, or any other personnel action based on race, ethnicity, color, national origin, sex/gender, sexual orientation, gender identity or expression, religion, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

CVS Health

New Jobs

Software Security Analyst