Senior Full-Stack App Security Engineer (Hybrid – Austin)

Akraya; Austin (TX); Hybrid; USD 83,000 - 87,000; Full time

Job summary

Akraya in Austin, TX is seeking two Application Security Engineers IV to join the Secure DevOps team. The roles combine full-stack development (75%) with application security duties (25%), designing and maintaining security automation tools integrated into CI/CD pipelines.

You will work with React, Node.js, Java, Spring Boot, and Python to build security tooling, analyze scan data, and collaborate with distributed Agile teams to strengthen product security across the SDLC.

Qualifications

• 6+ years of full-stack software development experience.
• Strong frontend development with React and Node.js.
• Backend development with Java and Spring Boot.
• Mandatory Python scripting and automation experience.
• Understanding of SAST, DAST, and SCA concepts.
• Experience with CI/CD pipelines and DevSecOps practices.
• Experience developing REST APIs and web apps.

Responsibilities

• Develop and maintain application security automation tools.
• Build web-based security tools, REST APIs, and automation solutions using React, Node.js, Java, and Spring Boot.
• Integrate SAST, DAST, and SCA security tools into CI/CD pipelines.
• Analyze security scan data, logs, and vulnerabilities to identify application security gaps.
• Develop internal scanners and security automation solutions using Python.
• Collaborate with application developers to implement secure coding practices across the SDLC.

Skills

React

Node.js

Java

Spring Boot

Python scripting

SAST/DAST/SCA

CI/CD & DevSecOps

REST APIs

Security automation

Team collaboration

Tools

AppScan

Checkmarx

Semgrep

Snyk

Job description

Akraya in Austin, TX is seeking two Application Security Engineers IV to join the Secure DevOps team. The roles combine full-stack development (75%) with application security duties (25%), designing and maintaining security automation tools integrated into CI/CD pipelines.

You will work with React, Node.js, Java, Spring Boot, and Python to build security tooling, analyze scan data, and collaborate with distributed Agile teams to strengthen product security across the SDLC.