Lead Cybersecurity - Application Security DevSecOps Engineer

AT&T; Dallas (TX); On-site; USD 128,400 - 215,800; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement program

Paid Time Off and Holidays

Employee Assistance Programs (EAP)

Job summary

A leading telecommunications company is seeking a Lead Cybersecurity - Application Security DevSecOps Engineer to oversee the implementation and optimization of DAST tools in development pipelines. The ideal candidate will have 4-8 years of experience in application security, with a strong understanding of security testing standards and tools. Responsibilities include performing vulnerability assessments, collaborating with development teams, and providing training on security practices. This position offers competitive salary and benefits.

Qualifications

• 4-8 years of experience in application security.
• Hands-on experience with DAST tools.
• Strong understanding of application security standards.

Responsibilities

• Lead implementation and optimization of DAST tools.
• Perform vulnerability assessments on applications.
• Collaborate with teams to integrate DAST into workflows.

Skills

DAST tools

Application security

Collaboration with DevOps

Vulnerability assessments

Security testing

Education

Bachelor's degree in Computer Science, Information Security, or related discipline

Certified Ethical Hacker (CEH)

Offensive Security Certified Professional (OSCP)

Tools

Burp Suite

IBM AppScan

HCL AppScan

Netsparker

Acunetix

Job description

Lead Cybersecurity - Application Security DevSecOps Engineer

Apply for the Lead Cybersecurity - Application Security DevSecOps Engineer role at AT&T.

This position requires office presence of a minimum of 5 days per week and is only located in the posted locations. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk‑taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future—you’ll create it.

Key Responsibilities

• Lead the implementation, configuration, and optimization of DAST tools across development pipelines.
• Define and maintain best practices and standards for dynamic application security testing.
• Perform in‑depth vulnerability assessments and security testing on web applications, APIs, and mobile apps.
• Collaborate closely with development, DevOps, and security teams to integrate DAST into CI/CD workflows.
• Analyze DAST scan results, validate findings, and prioritize remediation efforts based on risk.
• Stay current on emerging threats, vulnerabilities, and exploits relevant to application security.
• Provide expert guidance and training to teams on interpreting DAST reports and remediation strategies.
• Support compliance efforts by ensuring security testing meets regulatory and industry standards.

Work Experience

• Typically, 4-8 years of experience in application security, with significant hands‑on experience using DAST tools and methodologies.
• Proven expertise in testing complex web applications, APIs, and mobile applications for security vulnerabilities.
• Experience integrating DAST tools (e.g., Burp Suite, IBM AppScan, HCL AppScan, Netsparker, Acunetix) into CI/CD pipelines and DevSecOps environments.
• Strong understanding of application security standards (e.g., OWASP Top Ten, SANS CWE Top 25).
• Knowledge of complementary security testing approaches such as Static Application Security Testing (SAST) and Interactive Application Security Testing (IAST).
• Effective communication skills and experience collaborating with development teams to remediate vulnerabilities.
• Familiarity with programming languages and frameworks commonly used in web and mobile applications, including Java, Python, Bash/Shell Scripting, PHP, Javascript, etc.

Education

• Bachelor’s degree in Computer Science, Information Security, Software Engineering, or a related discipline is preferred.
• Advanced degrees (Master’s or certifications) can enhance expertise and credibility.
• Relevant certifications such as:
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• GIAC Web Application Penetration Tester (GWAPT)
• Certified Application Security Engineer (CASE)
• Certifications specifically related to security testing tools (e.g., Burp Suite Certified Practitioner)

Additional Skills

• Deep technical knowledge of dynamic security testing tools and techniques.
• Strong analytical skills to interpret scan results and distinguish false positives.
• Solid understanding of web protocols, authentication mechanisms, and session management.
• Ability to lead security testing initiatives and mentor junior security engineers.
• Continuous learner mindset to stay ahead of evolving security threats and testing technologies.

Supervisor

No

Salary Range

$128,400.00 - $215,800.00

Job Details

• Weekly Hours: 40
• Time Type: Regular
• Location: USA:NC:Charlotte / Research Dr - Dat:9139 Research Dr
• Seniority level: Not Applicable
• Employment type: Full-time
• Job function: Information Technology
• Industries: Wireless Services, IT Services and IT Consulting, and Telecommunications

Benefits

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (at least 23 days of vacation each year and 9 company‑designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories
• AT&T internet (and fiber where available) and AT&T phone

Ready to join our team? Apply today.

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.