Senior AppSec Architect - DevSecOps & Zero Trust Leader

Oceaneering International; Houston (TX); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Oceaneering International is seeking an experienced Application Security Architect to build and operationalize its enterprise AppSec program. The role embeds security into the SDLC and CI/CD pipelines, partnering with SCOE and Cybersecurity leadership to reduce software supply chain risk and enforce secure development standards.

The position offers a hybrid work model with in‑office collaboration in Houston when needed, and requires leading centralized tooling, governance, and training across

Qualifications

• Minimum 8 years in cybersecurity with strong focus on Application Security / DevSecOps.
• Minimum 8 years’ experience building enterprise AppSec programs and CI/CD security controls.
• Minimum 5 years’ experience with SAST, DAST, SCA tools, GitHub, CI/CD pipelines, and secure SDLC frameworks.
• Experience implementing Zero Trust principles in development environments.
• Strong understanding of software supply chain risks and secure coding practices.
• Experience working in a global, multi‑business unit organization is a plus.

Responsibilities

• Define and govern application security requirements, controls, and assurance activities embedded within the SDLC/CI‑CD model.
• Partner with SCOE to integrate security without duplicating ownership of platforms or standards.
• Lead secure development practices, secure coding standards, and remediation SLAs across application teams.
• Architect and implement a secure CI/CD pipeline with embedded controls (SAST, SCA, DAST, secrets scanning).
• Develop threat modeling capabilities for critical applications and enforce secure‑by‑design principles.

Skills

Application Security

DevSecOps

Zero Trust

Threat Modeling

Security Testing

Tools

SAST

DAST

SCA

GitHub

CI/CD pipelines

Job description

Oceaneering International is seeking an experienced Application Security Architect to build and operationalize its enterprise AppSec program. The role embeds security into the SDLC and CI/CD pipelines, partnering with SCOE and Cybersecurity leadership to reduce software supply chain risk and enforce secure development standards.

The position offers a hybrid work model with in‑office collaboration in Houston when needed, and requires leading centralized tooling, governance, and training across