Application Security Engineer

• Current Openings
• Veterans Program
• Working With Indotronix
• Referral Program

All current openings

Application Security Engineer

• Location: Houston, Texas 77002
• Work model: On-site
• Posted June 22, 2026
• Job ID: JPC - 205425

Easy ApplyApply Now

Job Description

Application Security Engineer (SAST/DAST Focus)

Location: Houston, TX (Remote Eligible) | Job Type: C2C

About the Role

Join Chevron's forward-thinking cybersecurity team as an Application Security Engineer focused on SAST/DAST. Drive secure software development, integrate security into DevOps, and make a measurable impact on enterprise risk reduction. This is your opportunity to advance your career in a collaborative, innovation-driven environment dedicated to modern security practices.

Responsibilities

• Implement, manage, and optimize SAST and DAST tools (Checkmarx, Veracode, Fortify, SonarQube, Burp Suite, OWASP ZAP) across multiple application environments
• Integrate automated security testing into CI/CD pipelines (Azure DevOps, GitHub, Jenkins) to enable true DevSecOps
• Conduct code reviews and vulnerability assessments to ensure robust, secure applications
• Identify, triage, and remediate vulnerabilities with a focus on the OWASP Top 10
• Collaborate with development teams to embed secure coding best practices into SDLC
• Support threat modeling and security design review initiatives
• Monitor and report on application security posture and emerging risk trends
• Provide expert assistance in application-related security incident response

Required Skills and Experience

• Proficient with SAST and DAST tools
• In-depth knowledge of OWASP Top 10 and secure coding practices
• Experience integrating security into CI/CD pipelines
• Strong understanding of web application architecture (APIs, microservices)
• Familiarity with container security (Docker, Kubernetes)
• Hands-on with open-source scanning tools (SCA)
• Programming or scripting experience (Java, Python, .NET)
• Proven collaboration with developers in agile environments

Preferred Skills

• Experience with cloud security (especially Azure)
• Exposure to Infrastructure-as-Code (IaC) security scanning
• Security certifications (CSSLP, GWAPT, Security+)

Benefits

• Dynamic, high-impact projects in the energy sector
• Opportunities for career growth and upskilling in the latest security technologies
• Supportive, diverse, and collaborative team environment
• Remote work flexibility

How to Apply

Ready to power Chevron's secure digital future? Submit your resume and a brief cover letter outlining your application security accomplishments via our application portal.

Easy ApplyApply Now

Interested in this role?

Easy ApplyApply Now

Job details

Job ID JPC - 205425

Location Houston, Texas, United States

Work Model On-site

Job Type C2C

Posted June 22, 2026

Skills Application Security Engineer (SAST/DAST Focus)OverviewWe are seeking an Application Security Engineer to support Chevron's secure software development initiatives This role will focus on implementing and managing SAST/DAST tooling integrating security into the SDLC and improving application-level risk postureKey Responsibilities• Implement Manage and optimize SAST and DAST tools across application environments• Integrate security testing into CI/CD pipelines (DevSecOps practices)• Perform code reviews and vulnerability assessments• Identify triage and remediate application vulnerabilities (OWASP Top 10)• Partner with development teams to embed secure coding practices• Support threat modeling and security design reviews• Monitor and report on application security posture and risk trends• Assis Checkmarx veracode Fortify SonarQube)o DAST tools (eg BurpSuite OWASP ZAP)• Solid understanding of:o OWASP Top 10 / secure coding practiceso Web application architecture (APIs microservices)• Experience integrating security into:o CI/CD pipelines (Azure DevOps GitHub Jenkins etc)• Familiarity with:o Container security (Docker Kubernetes)o Open-source scanning (SCA tools)• Programming/scripting knowledge (Java Python NET or similar)• Experience working with developers in an agile environmentNice to Have• Cloud security exposure (Azure preferred)• Experience with IaC security scanning• Certifications (eg CSSLP GWAPT Security+)

Share this job

*