Application Security Engineer - DevSecOps & Secure SDLC

Kestra Holdings; Austin (TX); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Competitive pay

401(k) plan

Health insurance

Career development

Long-term growth opportunities

Job summary

Kestra Holdings in Austin, Texas, seeks an Application Security Engineer to embed security into development and operations, promoting a culture of shared security responsibility.

The ideal candidate will balance application security expertise with DevOps experience to secure architectures, perform assessments, and guide training. A bachelor’s in CS/IT and 2+ years in a similar role, plus knowledge of OWASP Top 10 and CI/CD tooling, are required.

Qualifications

• Bachelor’s degree in CS/IT or related field.
• 2+ years in application security or a similar role.
• Knowledge of OWASP Top 10 vulnerabilities.
• Hands-on experience with CI/CD security integration.

Responsibilities

• Embed security throughout the software development lifecycle.
• Manage security tools and solutions.
• Perform security assessments, code reviews, and penetration tests.
• Integrate security tools, standards and processes into the CI/CD pipeline.
• Collaborate with IT and development teams to ensure secure architectures.
• Provide secure coding training and resources to development teams.
• Maintain DevSecOps and security documentation.
• Stay current with security trends, vulnerabilities and best practices.

Skills

Experience 2+ yrs

OWASP Top 10

CI/CD security

Education

Bachelor’s degree in CS/IT or related field

Job description

Kestra Holdings in Austin, Texas, seeks an Application Security Engineer to embed security into development and operations, promoting a culture of shared security responsibility.

The ideal candidate will balance application security expertise with DevOps experience to secure architectures, perform assessments, and guide training. A bachelor’s in CS/IT and 2+ years in a similar role, plus knowledge of OWASP Top 10 and CI/CD tooling, are required.