AppSec Jobs

Cencora Security Team

Open security roles at Cencora, and what we know about the team behind them.

hospital & health care · 42,000 employees · 2 open roles. Updated October 15, 2026.

Security at Cencora

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

  • Embed security into the software development lifecycle by integrating security controls and automated scanning throughout the DevOps/CI-CD pipeline.
  • Advocate for security earlier in development, empower and educate developers on secure coding, and balance business enablement with enterprise risk and governance responsibilities.

The team

  • AppSec/DevSecOps engineers and leads focused on application and API security, vulnerability identification and remediation, CI/CD security integration, and developer enablement.
  • Enterprise information-security leadership oversees SOC/IR operations (SIEM, SOAR, EDR), incident command, KPIs/budgets, and centers of excellence for information security strategy.

What they're working on

1) Application and API security: identify and remediate vulnerabilities before production. 2) Automation & CI/CD integration: integrate automated SAST/DAST/SCA/IaC checks into pipelines. 3) Vulnerability management: track aging vulnerabilities, reduce false positives, and monitor remediation. 4) Secure testing & tooling: adopt SAST, DAST, SCA, IAST, IaC and container security, and perform manual testing/pen testing where needed. 5) Incident response & SOC optimization: operate SIEM/SOAR/EDR, serve as enterprise incident commander for high-severity events. 6) Metrics & governance: set KPIs, report to leadership, and run centers of excellence. 7) Privacy & compliance: maintain global privacy program (HIPAA/GDPR/state laws) and named privacy contacts.