Senior Engineer – Cybersecurity Application Security

OneMain Financial; Irving (TX); On-site; USD 130,000 - 180,000; Full time

Job summary

OneMain Financial is seeking an experienced Application Security Engineer to design, implement, and continuously improve security tooling across development pipelines. You will work with engineering to embed secure-by-design practices, govern vulnerability remediation, and raise overall security maturity across APIs and software delivery.

The role requires 5+ years in app security, strong API security expertise, and experience with SAST/DAST/SCA/IAST, container security, and IaC-based controls.

Qualifications

• Bachelor's degree is required in a related field.
• 5+ years of application security engineering experience.
• Experience implementing and administering application security platforms (SAST, DAST, SCA, IAST, etc.).
• Experience securing APIs across the development lifecycle and remediation guidance.
• Experience integrating security tooling into CI/CD pipelines using IaC.

Responsibilities

• Implement, administer, and improve application security tooling for secure software development.
• Integrate security testing and controls into pipelines and workflows.
• Develop and maintain application security standards, policies, and documentation.
• Analyze findings and metrics to identify risk and improvements.
• Partner with engineering to enable secure-by-design development practices.
• Support governance, vulnerability management, and remediation tracking.
• Collaborate with cybersecurity, architecture, and engineering stakeholders to raise security maturity.
• Contribute to security automation initiatives to increase efficiency.
• Support secure AI-assisted development workflows.

Skills

Application security engineering

Security tooling

CI/CD security integration

Security automation

Communication skills

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field

Tools

SAST

DAST

SCA

IAST

Container security

API security testing

Infrastructure-as-code security

Job description

Key Responsibilities

• Implement, administer, and continuously improve application security tooling supporting secure software development.
• Integrate security testing and security controls into software delivery pipelines and engineering workflows.
• Develop, maintain, and enhance application security standards, policies, procedures, documentation, and operational guidance.
• Analyze security findings, operational metrics, and compliance trends to identify improvement opportunities and areas of elevated risk.
• Partner with engineering teams to improve security adoption and enable secure-by-design and secure-by-default development practices.
• Support secure SDLC governance, vulnerability management, and remediation tracking activities.
• Collaborate with cybersecurity, architecture, platform, and engineering stakeholders to improve overall application security maturity.
• Contribute to security automation initiatives that increase operational efficiency and reduce manual effort.
• Support the secure implementation of emerging software development practices, including AI-assisted development workflows.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• 5+ years of application security engineering experience.
• Experience implementing and administering application security platforms, including SAST, DAST, SCA, IAST, container security, API security testing, and software supply chain security capabilities.
• Experience securing APIs across the development lifecycle, including API discovery, authentication and authorization validation, schema and contract testing, abuse-case analysis, OWASP API Security Top 10 risks, and remediation guidance.
• Experience integrating security tooling and automated security controls into CI/CD pipelines using infrastructure-as-code (IAC).
• Experience supporting secure SDLC governance, policy enforcement, compliance reporting, and remediation management.
• Working knowledge of application security principles, secure coding practices, OWASP Top 10 risks, and common vulnerability remediation techniques.
• Experience developing and maintaining technical standards, procedures, policies, and security documentation.
• Strong written and verbal communication skills with the ability to influence technical stakeholders.
• Ability to independently manage moderately complex security initiatives and contribute to broader cybersecurity objectives.

Preferred Qualifications

• Industry certifications such as CSSLP, GSEC, CISSP, GWAPT, or similar.
• Experience supporting financial services, banking, or other highly regulated environments.
• Experience assessing, implementing, and governing security controls for AI-assisted software development workflows, including secure use of code-generation tools, prompt and output handling, developer guardrails, and risk monitoring.
• Experience with security automation, scripting, and workflow orchestration.Experience creating executive, engineering, or operational security metrics and dashboards.

OneMain Holdings, Inc. is an Equal Employment Opportunity (EEO) employer. Qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship status, color, creed, culture, disability, ethnicity, gender, gender identity or expression, genetic information or history, marital status, military status, national origin, nationality, pregnancy, race, religion, sex, sexual orientation, socioeconomic status, transgender or on any other basis protected by law.

OneMain Financial (NYSE: OMF) is the leader in offering nonprime customers responsible access to credit and is dedicated to improving the financial well-being of hardworking Americans. Since 1912, we've looked beyond credit scores to help people get the money they need today and reach their goals for tomorrow. Our growing suite of personal loans, credit cards and other products help people borrow better and work toward a brighter future. In our more than 1300 community branches and across the U.S., team members help millions of customers solve critical financial needs, including debt consolidation, home and auto repairs, medical procedures and extending household budgets. We meet customers where they want to be - in person, by phone and online. At every level, we're committed to an inclusive culture, career development and impacting the communities where we live and work. Getting people to a better place has made us a better company for over a century. There's never been a better time to shine with OneMain.