Application Security Engineer IV Secure DevOps : 26-03345

Akraya; Austin (CA); Hybrid; USD 83,000 - 87,000; Full time

Job summary

Akraya in Austin, TX is seeking two Application Security Engineers IV to join the Secure DevOps team. This role blends full‑stack development (75%) with security automation and service components integrated into CI/CD pipelines.

You will design and maintain security tools, analyze vulnerabilities, and collaborate with distributed Agile teams primarily in San Jose to deliver secure DevOps solutions using React, Node.js, Java/Spring Boot, and Python.

Qualifications

• 6+ years of full-stack software development experience.
• Frontend expertise with React and Node.js.
• Backend experience with Java and Spring Boot.
• Python scripting and automation experience.
• Experience with CI/CD and DevSecOps practices.

Responsibilities

• Develop and maintain application security automation tools and security-as-a-service components.
• Build web-based security tools, REST APIs, and automation solutions using React, Node.js, Java, and Spring Boot.
• Integrate SAST, DAST, and SCA security tools into CI/CD pipelines.
• Analyze security scan data, logs, and vulnerabilities to identify application security gaps.
• Develop internal scanners and security automation solutions using Python.
• Collaborate with application developers to implement secure coding practices across the SDLC.
• Support foundational product security improvements and reduce security vulnerabilities.
• Use AI-assisted coding tools and explore LLM/SLM capabilities in secure development workflows.
• Work with distributed Agile teams, primarily in San Jose, to deliver secure DevOps solutions.

Skills

React

Node.js

Java

Spring Boot

Python scripting

Security concepts (SAST DAST SCA)

CI/CD / DevSecOps

REST APIs

Communication

Tools

AppScan

Checkmarx

Semgrep

Snyk

Job description

Primary Skills: React / Node.js (Expert), Java / Spring Boot (Expert), Python Security Automation (Advanced), SAST / DAST / SCA Tools (Advanced), CI/CD & DevSecOps Integration (Expert)

Contract Type: W2 Only Duration: 12+ Months Location: Austin, TX (#LI - Hybrid) Pay Range: $60 - $63 on W2 #LP

Job Summary

We are seeking two Application Security Engineers IV to join the Secure DevOps team. This role is primarily focused on full-stack software development (75%) with application security responsibilities (25%). The engineers will design, develop, and maintain security automation tools and security-as-a-service components integrated into CI/CD pipelines to support secure software development. The ideal candidates will have strong experience with React, Node.js, Java/Spring Boot, and Python, along with foundational application security knowledge. They will help build internal security tools, integrate security scanning solutions, analyze vulnerabilities, and leverage AI-assisted development tools.

Key Responsibilities

• Develop and maintain application security automation tools and security-as-a-service components.
• Build web-based security tools, REST APIs, and automation solutions using React, Node.js, Java, and Spring Boot.
• Integrate SAST, DAST, and SCA security tools into CI/CD pipelines.
• Analyze security scan data, logs, and vulnerabilities to identify application security gaps.
• Develop internal scanners and security automation solutions using Python.
• Collaborate with application developers to implement secure coding practices across the SDLC.
• Support foundational product security improvements and reduce security vulnerabilities.
• Use AI-assisted coding tools and explore LLM/SLM capabilities in secure development workflows.
• Work with distributed Agile teams, primarily in San Jose, to deliver secure DevOps solutions.

Must-Have Skills

• 6+ years of full-stack software development experience.
• Strong frontend development experience with React and Node.js.
• Backend development experience using Java and Spring Boot.
• Mandatory Python scripting and automation experience.
• Understanding of application security concepts, including SAST, DAST, and SCA.
• Experience with CI/CD pipelines and DevSecOps practices.
• Experience developing REST APIs and web-based applications.
• Strong communication, collaboration, and independent problem-solving skills.

Nice-to-Have Skills

• Hands-on experience with AppScan, Checkmarx, Semgrep, or Snyk.
• Experience analyzing security scan results, logs, and vulnerability data.
• Familiarity with databases such as Hadoop, NoSQL, and Oracle.
• Knowledge of GraphQL and Angular.
• Experience with Kafka or other security automation integrations.
• Familiarity with AI/ML security, LLMs, SLMs, and AI-driven development workflows.
• Experience working in ecommerce or public-facing product development environments.

Preferred Qualifications

• Experience building or integrating application security scanning tools.
• Background in secure software development and product security engineering.
• Experience working in Agile environments with short development sprints and continuous delivery.
• Ability to assess security risks, prioritize vulnerabilities, and recommend appropriate remediation.
• Interest in learning emerging technologies and applying them to security engineering.