Senior AppSec Engineer – Secure SDLC & API Security

OneMain Financial; Irving (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

OneMain Financial in Irving, TX is seeking a Senior Engineer – Cybersecurity Application Security to lead the design and implementation of secure software development practices on site. You will build and maintain security tooling, integrate tests into CI/CD, and drive secure-by-design across engineering teams.

The role requires 5+ years of experience in application security, deep knowledge of API and software supply chain security, and the ability to translate complex risks into actionable

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, engineering or related field.
• 5+ years of application security engineering experience.
• Experience implementing and administering application security platforms (SAST, DAST, SCA, IAST, container security, API security testing, software supply chain security).
• Experience securing APIs across the development lifecycle including API discovery, authentication/authorization, schema testing, OWASP API Security Top 10, remediation guidance.
• Experience integrating security tooling and automated security controls into CI/CD pipelines using infrastructure-as-code (IAC).
• Experience supporting secure SDLC governance, policy enforcement, compliance reporting, and remediation management.
• Strong written and verbal communication skills.
• Ability to independently manage moderately complex security initiatives.

Responsibilities

• Implement, administer, and improve application security tooling for secure software development.
• Integrate security testing and security controls into software delivery pipelines and engineering workflows.
• Develop, maintain, and enhance application security standards, policies, procedures, documentation, and operational guidance.
• Analyze security findings, metrics, and compliance trends to identify improvements and elevated risk areas.
• Partner with engineering teams to improve security adoption and enable secure-by-design development practices.
• Support secure SDLC governance, vulnerability management, and remediation tracking activities.
• Collaborate with cybersecurity, architecture, platform, and engineering stakeholders to improve security maturity.
• Contribute to security automation initiatives that increase operational efficiency.
• Support secure implementation of emerging software development practices, including AI-assisted workflows.

Skills

Communication skills

Security governance

Stakeholder influence

Secure-by-design

CI/CD security

Education

Bachelor's degree in Cybersecurity / CS / IT / Engineering

Tools

SAST

DAST

SCA

IAST

Container security

API security testing

Software supply chain security

CI/CD IaC tooling

Job description

OneMain Financial in Irving, TX is seeking a Senior Engineer – Cybersecurity Application Security to lead the design and implementation of secure software development practices on site. You will build and maintain security tooling, integrate tests into CI/CD, and drive secure-by-design across engineering teams.

The role requires 5+ years of experience in application security, deep knowledge of API and software supply chain security, and the ability to translate complex risks into actionable