IT Principal Application Security Engineer (Must Reside in Texas)

RBFCU Insurance Agency LLC; Live Oak (TX); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

401(k) with matching

Medical benefits

Tuition reimbursement

Life insurance

Paid time off

Parental leave

Wellness program

Job summary

Randolph-Brooks Federal Credit Union is seeking a Principal Application Security Engineer to lead security strategy for applications and products. The role emphasizes secure development, threat modeling, and security platform alignment across the enterprise.

The position supports a hybrid work model after initial training at the Live Oak, TX center, with preference for candidates residing in Texas. Strong partnership with IT leadership is essential.

Qualifications

• Proven mastery of threat modeling, secure architecture, code review, and API security.
• Experience with security engineering, software engineering, cloud security, and security automation.
• Ability to influence senior leaders and mentor engineers across large programs.

Responsibilities

• Define multi-year technical strategy and capability roadmap for application security and product security.
• Lead security architecture decisions for high-risk systems and establish secure defaults and reference architectures.
• Architect scalable security platforms, automation, telemetry, and CI/CD controls across the enterprise.
• Identify emerging threats, sponsor cross-functional programs addressing AI security and cloud-native security.
• Provide guidance for critical vulnerabilities, risk acceptances, and executive-level technology decisions.
• Develop talent through mentorship, design reviews, and communities of practice.

Skills

Threat modeling

Secure architecture

Code review

Application security

API security

Security automation

Cloud security

Executive communication

Education

Bachelor's degree in CS/IS/Cybersecurity

Job description

IT Principal Application Security Engineer (Must Reside in Texas)### IT Principal Application Security Engineer (Must Reside in Texas)Apply: ASC - San Antonio: Full time: Posted Today: 015529**Job Description and Requirements**Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented **Principal Application Security Engineer** to join our amazing **IT Security** team! The **Principal Application Security Engineer** will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: **1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233.** **All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.** To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU. * Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided).* Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment The Principal Application Security Engineer is an enterprise technical leader responsible for shaping and scaling application and product security strategy across the organization. The role leads the most complex and consequential security architecture decisions, establishes secure engineering standards and reference architectures, and creates platform-level capabilities that make secure development the default. The Principal Engineer influences senior technology leaders, mentors security and engineering talent, addresses emerging risks, and drives measurable improvements across the software ecosystem. **Essential Functions and Responsibilities:** * Define the multi-year technical strategy, target state, standards, and capability roadmap for application and product security in alignment with business and technology priorities.* Lead security architecture, threat modeling, and design decisions for the organization’s highest-risk, most complex, or most strategically important systems.* Establish enterprise guardrails, secure defaults, paved paths, reference architectures, and engineering standards spanning applications, APIs, cloud, data, containers, identity, and infrastructure.* Architect and guide the development of scalable application security platforms, automation, telemetry, risk analytics, and CI/CD controls used across the enterprise.* Identify systemic risk patterns, anticipate emerging threats, and sponsor cross-functional programs addressing AI security, software supply chain risk, cloud-native security, and platform resilience.* Provide authoritative technical guidance for critical vulnerabilities, security incidents, risk acceptances, acquisitions, major transformations, and executive-level technology decisions.* Define measurement frameworks that connect engineering practices and security controls to risk reduction, business outcomes, developer experience, and operational effectiveness.* Influence senior engineering, architecture, product, risk, and business leaders to prioritize and adopt strategic security improvements.* Develop technical talent through mentorship, design and code review, communities of practice, succession planning, and raising expectations for engineering excellence.* Represent the organization in industry forums, peer networks, strategic vendor engagements, or professional communities as appropriate.* All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice) **Requirements:** * Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.* Minimum of 5 years of progressive experience in application security, product security, security engineering, software engineering, cloud security, or a related cybersecurity discipline.* Demonstrated mastery of threat modeling, secure architecture, code review, application and API security, vulnerability management, cloud-native security, container security, and security automation.* Proven experience designing or materially influencing large-scale platforms, distributed systems, cloud environments, developer platforms, or security engineering capabilities.* Advanced software engineering capability in one or more production languages and a strong record of designing maintainable tooling, platforms, or controls.* Ability to define strategy and technical standards while remaining sufficiently hands-on to evaluate designs, review critical code, guide prototypes, and resolve difficult engineering problems.* Exceptional systems thinking and technical judgment, including the ability to make defensible decisions when data is incomplete and tradeoffs span security, reliability, delivery, cost, and customer impact.* Executive-level written and verbal communication skills, with the ability to frame complex risk, build alignment, and influence decisions across organizational boundaries.* Demonstrated leadership through influence, including mentoring senior engineers, resolving conflict, creating clarity in ambiguity, and sustaining momentum across long-running initiatives.* High integrity, sound discretion, organizational awareness, and a consistent record of taking accountability for enterprise outcomes. **Skills / Certification / Licensing:** * Recognized enterprise authority who integrates deep expertise across software, architecture, cloud, data, identity, automation, and emerging technology.* Defines strategic problems, creates direction, and operates with broad organizational trust and accountability.* Resolves novel, high-consequence, systemic problems and establishes durable enterprise solutions.* Shapes organization-wide technology decisions, engineering standards, investment priorities, and risk outcomes.* Influences executives and senior technical leaders, reconciles competing priorities, and creates alignment across organizational boundaries.* Multiplies organizational capability through strategy, standards, mentorship, communities of practice, and technical stewardship.* Delivers measurable enterprise risk reduction, improved developer experience, stronger technical talent, and scalable secure-by-default capabilities. ***All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.***### About Us**Careers at RBFCU** Established in 1952, Randolph-Brooks Federal Credit Union is a full-service financial cooperative whose mission is to improve members’ economic well-being and quality of life. With assets exceeding $19.6 billion, RBFCU serves more than 1.1 million members at branches throughout Texas and Oklahoma, and online at rbfcu.org and the RBFCU Mobile app. Recognized for financial stability, our credit union has consistently received the highest ratings of “Five Star” and “Superior” from respected organizations that evaluate financial institutions in the United States. We’re frequently recognized as one of the best workplaces on a local and national level. **Our Benefits** RBFCU is proud to offer a comprehensive benefits package, including:* 401(k) with matching incentives — up to 10 percent* Competitive pay* Medical, vision and dental benefits available to employees and their families from the first day of employment* Tuition reimbursement plans* Life insurance* Pharmacy discount programs* Flexible Spending (FSA), Health Savings (HSA) and Dependent Care account options* Paid time off* Parental leave* Company-paid benefits include: + Long-term disability + Basic life insurance + Wellness program + Credit-monitoring service + Employee assistance program* Training and volunteer opportunities **Apply to join the RBFCU family!**