Senior App Security Engineer — Secure-by-Design & Automation

OneMain Financial; Irving (TX); On-site; USD 130,000 - 180,000; Full time

Job summary

OneMain Financial is seeking an experienced Application Security Engineer to design, implement, and continuously improve security tooling across development pipelines. You will work with engineering to embed secure-by-design practices, govern vulnerability remediation, and raise overall security maturity across APIs and software delivery.

The role requires 5+ years in app security, strong API security expertise, and experience with SAST/DAST/SCA/IAST, container security, and IaC-based controls.

Qualifications

• Bachelor's degree is required in a related field.
• 5+ years of application security engineering experience.
• Experience implementing and administering application security platforms (SAST, DAST, SCA, IAST, etc.).
• Experience securing APIs across the development lifecycle and remediation guidance.
• Experience integrating security tooling into CI/CD pipelines using IaC.

Responsibilities

• Implement, administer, and improve application security tooling for secure software development.
• Integrate security testing and controls into pipelines and workflows.
• Develop and maintain application security standards, policies, and documentation.
• Analyze findings and metrics to identify risk and improvements.
• Partner with engineering to enable secure-by-design development practices.
• Support governance, vulnerability management, and remediation tracking.
• Collaborate with cybersecurity, architecture, and engineering stakeholders to raise security maturity.
• Contribute to security automation initiatives to increase efficiency.
• Support secure AI-assisted development workflows.

Skills

Application security engineering

Security tooling

CI/CD security integration

Security automation

Communication skills

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field

Tools

SAST

DAST

SCA

IAST

Container security

API security testing

Infrastructure-as-code security

Job description

OneMain Financial is seeking an experienced Application Security Engineer to design, implement, and continuously improve security tooling across development pipelines. You will work with engineering to embed secure-by-design practices, govern vulnerability remediation, and raise overall security maturity across APIs and software delivery.

The role requires 5+ years in app security, strong API security expertise, and experience with SAST/DAST/SCA/IAST, container security, and IaC-based controls.