Application Security Engineer IV – Secure DevOps : 26-03345

Akraya, Inc.; Austin (TX); Hybrid; USD 83,000 - 87,000; Full time

Job summary

Akraya in Austin, TX is seeking two Application Security Engineers IV to join the Secure DevOps team. The roles combine full-stack development (75%) with application security duties (25%), designing and maintaining security automation tools integrated into CI/CD pipelines.

You will work with React, Node.js, Java, Spring Boot, and Python to build security tooling, analyze scan data, and collaborate with distributed Agile teams to strengthen product security across the SDLC.

Qualifications

• 6+ years of full-stack software development experience.
• Strong frontend development with React and Node.js.
• Backend development with Java and Spring Boot.
• Mandatory Python scripting and automation experience.
• Understanding of SAST, DAST, and SCA concepts.
• Experience with CI/CD pipelines and DevSecOps practices.
• Experience developing REST APIs and web apps.

Responsibilities

• Develop and maintain application security automation tools.
• Build web-based security tools, REST APIs, and automation solutions using React, Node.js, Java, and Spring Boot.
• Integrate SAST, DAST, and SCA security tools into CI/CD pipelines.
• Analyze security scan data, logs, and vulnerabilities to identify application security gaps.
• Develop internal scanners and security automation solutions using Python.
• Collaborate with application developers to implement secure coding practices across the SDLC.

Skills

React

Node.js

Java

Spring Boot

Python scripting

SAST/DAST/SCA

CI/CD & DevSecOps

REST APIs

Security automation

Team collaboration

Tools

AppScan

Checkmarx

Semgrep

Snyk

Job description

Primary Skills: React / Node.js (Expert), Java / Spring Boot (Expert), Python Security Automation (Advanced), SAST / DAST / SCA Tools (Advanced), CI/CD & DevSecOps Integration (Expert)

Contract Type: W2 Only

Duration: 12+ Months

Location: Austin, TX ( - Hybrid)

Pay Range: $60 - $63 on W2

Job Summary

We are seeking two Application Security Engineers IV to join the Secure DevOps team. This role is primarily focused on full-stack software development (75%) with application security responsibilities (25%). The engineers will design, develop, and maintain security automation tools and security-as-a-service components integrated into CI/CD pipelines to support secure software development.

Key Responsibilities

• Develop and maintain application security automation tools and security-as-a-service components.
• Build web-based security tools, REST APIs, and automation solutions using React, Node.js, Java, and Spring Boot.
• Integrate SAST, DAST, and SCA security tools into CI/CD pipelines.
• Analyze security scan data, logs, and vulnerabilities to identify application security gaps.
• Develop internal scanners and security automation solutions using Python.
• Collaborate with application developers to implement secure coding practices across the SDLC.
• Support foundational product security improvements and reduce security vulnerabilities.
• Use AI-assisted coding tools and explore LLM/SLM capabilities in secure development workflows.
• Work with distributed Agile teams, primarily in San Jose, to deliver secure DevOps solutions.

Must-Have Skills

• 6+ years of full-stack software development experience.
• Strong frontend development experience with React and Node.js.
• Backend development experience using Java and Spring Boot.
• Mandatory Python scripting and automation experience.
• Understanding of application security concepts, including SAST, DAST, and SCA.
• Experience with CI/CD pipelines and DevSecOps practices.
• Experience developing REST APIs and web-based applications.
• Strong communication, collaboration, and independent problem-solving skills.

Nice-to-Have Skills

• Hands-on experience with AppScan, Checkmarx, Semgrep, or Snyk.
• Experience analyzing security scan results, logs, and vulnerability data.
• Familiarity with databases such as Hadoop, NoSQL, and Oracle.
• Knowledge of GraphQL and Angular.
• Experience with Kafka or other security automation integrations.
• Familiarity with AI/ML security, LLMs, SLMs, and AI-driven development workflows.
• Experience working in ecommerce or public-facing product development environments.

Preferred Qualifications

• Experience building or integrating application security scanning tools.
• Background in secure software development and product security engineering.
• Experience working in Agile environments with short development sprints and continuous delivery.
• Ability to assess security risks, prioritize vulnerabilities, and recommend appropriate remediation.
• Interest in learning emerging technologies and applying them to security engineering.

ABOUT AKRAYA

Akraya is an award-winning IT staffing firm consistently recognized for our commitment to excellence and a thriving work environment.

Most recently, we were recognized Stevie Employer of the Year 2025, SIA Best Staffing Firm to work for 2025, Inc 5000 Best Workspaces in US (2025 & 2024) and Glassdoor's Best Places to Work (2023 & 2022).

As Talent solutions provider for Fortune 100 Organizations, Akraya's industry recognitions solidify our leadership position in the IT staffing space.