HiringCafe
Join our community

25 sast jobs at 20 companies in Austin, TX

2w
Save
Mark Applied
Hide
Application Security Engineer - ADR
Quincy or Toronto or Austin or Atlanta
$120k-$203k/yr OnsiteFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
6+ YOEHands-on experience with application security, ADR/RASP/WAAP, SAST/DAST/SCA, cloud (Azure/AWS), DevSecOps, secure SDLC, threat detection, incident response, and relevant security certifications.
Java, .NET, Python, Node.js, Azure, AWS, SAST, DAST, SCA, API Security, Container Security, Runtime Application Self-Protection (RASP), Web Application and API Protection (WAAP), Ansible, Terraform, Kubernetes, Infrastructure as Code (IaC), Agile, DevOps
Job PostingView all
1mo
Save
Mark Applied
Hide
Sr. Application Security Testing Engineer
Austin, Texas, United States
$165k-$201k/yr OnsiteFull Time
3M
3MNYSE: MMM: Manufacturers diversified industrial, safety, consumer, and electronics products.
3+ YOEBachelor's in cybersecurity/computer science/technology, 3+ years application security experience, hands-on SAST/DAST/SCA and CI/CD integration, threat modeling knowledge, strong communication; must be authorized to work without sponsorship.
SAST, DAST, SCA, GitHub, Azure DevOps, CI/CD
Job PostingView all
1mo
Save
Mark Applied
Hide
Information Protection Senior Advisor (Product Security – DevSecOps)
Plano or Bloomington or Austin or Morris Plains or Bloomfield or St. Louis
$125k-$208k/yr HybridFull Time
The Cigna Group
The Cigna GroupNYSE: CI: Provides health insurance and pharmacy benefit management services.
8+ YOE8+ years in cybersecurity/app or product security, experience automating security in CI/CD, hands-on SAST/DAST/SCA/MAST, cloud familiarity (AWS/Azure/GCP), scripting (Python/Java/Shell) and Agile experience.
DevSecOps, CI/CD, SAST, DAST, SCA, MAST, Python, Java, Shell, Angular, AWS, Azure, Google Cloud
Job PostingView all
2mo
Save
Mark Applied
Hide
AppSec Engineer
Austin or Chicago or Denver or Los Angeles or San Diego or San Francisco or United States or Australia or New Zealand or Canada or United Kingdom or Philippines
$131k-$169k/yr HybridFull Time
Karbon
Karbon: Practice management software for accounting firms.
4+ YOE4+ years security/development experience embedding AppSec in SDLC, cloud (Azure/AWS/GCP), SAST/SCA/DAST configuration, CI/CD security, code review, Python/PowerShell/Bash, and strong communication skills.
Microsoft .NET/C#, JavaScript, React, EmberJS, Python, Azure, AWS, GCP, PowerShell, Bash, Claude Code, GitHub Co-Pilot, Portswigger Burp, SAST, SCA, DAST, GitHub Actions, Azure Devops, EDR, MDM
Job PostingView all
1mo
Save
Mark Applied
Hide
Cybersecurity Software Engineer
Fairfax or Austin
$94k-$198k/yr HybridFull Time
CACI
CACINYSE: CACI: Provides information technology and professional services to government clients.
5+ YOEBachelor's degree, active TS/SCI, 5+ years cyber engineering (2+ with modern software), Kubernetes security, IaC/PaaS/DevSecOps experience, Ansible and scripting, SIEM/SAST/DAST/SCA familiarity, network protocol knowledge.
Kubernetes, SIEM, SAST, DAST, SCA, Ansible, SBOM, RBOM, TCP/IP, STIG, SRG, CIS, DevSecOps, IaC, PaaS, IAM, SDLC
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Application Security Engineer
Austin, Texas, United States
$95k/yr HybridFull Time
University of Texas at Austin
University of Texas at Austin: Provides public higher education and conducts academic research.
Experience in application security, secure code review, SAST/DAST/SCA, cloud security (Azure), and application vulnerability management; bachelor\u0002s degree or equivalent.
Microsoft Azure, Adobe Experience Cloud, Burp Suite, OWASP ZAP, Metasploit, Checkmarx, Veracode, SonarQube
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Engineer, Security & Compliance (US)
Austin or New York City or San Francisco
$110k-$150k/yr HybridFull Time
Code and Theory
Code and TheoryNASDAQ: STGW: Design and technology agency building digital products and platforms.
5+ YOE5+ years security engineering experience in SaaS/cloud environments; hands-on SOC 2/ISO control implementation, cloud security (GCP/AWS/Azure), SIEM/monitoring, CI/CD automation, and AI/agent security.
GCP, AWS, Azure, SOC 2 Type II, ISO 27001, ISO 42001, SIEM, SAST, DAST, Checkov, tfsec, OPA/Rego, CI/CD
Job PostingView all
1mo
Save
Mark Applied
Hide
Firmware Security Systems Architect
Austin, Texas, United States
OnsiteFull Time
Jabil
JabilNYSE: JBL: Provides manufacturing and supply chain solutions for global brands.
15+ YOEEstablish firmware security architecture and compliance; 15+ years firmware experience; Bachelor’s in engineering/computer science; expertise in Secure Boot, SPDM, supply chain security, Linux, vulnerability management; CISSP/CSSLP a plus.
Intel PFR, AMD PSP, ARM TrustZone, OpenBMC, AMI MegaRAC, Coverity, Black Duck, Eclypsium, Linux, SPDM, PLDM, IPMI, Redfish, MCTP, SMBUS, i2c, i3c, SPI, CI/CD, SAST, SBOM, NIST SP 800-193, FIPS 140-3, NIST CSF, Cyber Resilience Act, ETSI EN 303 645, DICE, TPM, PKI
Job PostingView all
1mo
Save
Mark Applied
Hide
Firmware Security Systems Architect
Austin, Texas, United States
OnsiteFull Time
Jabil
JabilNYSE: JBL: Provider of comprehensive global manufacturing and supply chain solutions.
15+ YOEBachelor's degree in computer, electrical, or related engineering; 15+ years of firmware design experience; expertise in firmware security, Linux, secure boot, compliance, vulnerability management, and cryptographic protocols.
NIST SP 800-193, NIST CSF, FIPS 140-3, Cyber Resilience Act, ETSI EN 303 645, SDLC, CI/CD, SAST, Coverity, Black Duck, Eclypsium, Linux, OpenBMC, MegaRAC, IPMI, Redfish, MCTP, PLDM, SMBUS, i2c, i3c, SPI, Secure Boot, SPDM, DICE, PKI, AES, HMAC, ECC, CVE, SBOM, Intel PFR, AMD PSP, ARM TrustZone, TPM, DMTF, TCG, OCP Security, MITRE
Job PostingView all
2mo
Save
Mark Applied
Hide
Sr Cybersecurity Engineer
Austin, Texas, United States
$153k-$222k/yr HybridFull Time
PayPal
PayPalNASDAQ: PYPL: Digital platform for sending money and processing online payments.
5+ YOEBachelor's degree in computer/IT or related field; 5+ years in security engineering; experience with vulnerability management and secure coding practices.
Ruby, Java, Python, JavaScript, Swift, SAST, API security scanners, software composition analysis, PCI-DSS, ISO27001
Job PostingView all
3mo
Save
Mark Applied
Hide
Engineering Manager, Application Security
Austin or San Francisco or Concord
$210k-$240k/yr HybridFull Time
Qualia
Qualia: Cloud platform for digital real estate closing and settlement.
5+ YOE2+ Mgmt5+ years security or full-stack engineering; 2+ years managing security or platform team; hands-on AppSec; automation with AI/LLMs; fintech/real estate familiarity preferred.
JavaScript, NodeJS, Typescript, MongoDB, Kubernetes, AWS, SAST, DAST, SCA, AI tooling
Job PostingView all
1w
Save
Mark Applied
Hide
Senior Quality Software Engineer
Austin, Texas, United States
OnsiteFull Time
Noda AI
Noda AI: Orchestrates autonomous systems for multi-domain defense operations.
7+ YOERequires 7+ years in software quality engineering, Python, CI/CD integration, test infrastructure, quality metrics, distributed systems, security testing, and U.S. citizenship with ability to obtain clearance.
Rust, Python, CI/CD, SAST, NIST 800-171, Hardware-in-the-loop (HIL), Software-in-the-loop (SIL), ITAR, EAR
Job PostingView all
1w
Save
Mark Applied
Hide
Principal Product Manager
Austin or United States
RemoteFull Time
Invicti
Invicti: Provides automated software for web application and API security.
5+ YOERequires 5+ years of product management experience, including 2+ years in technical product management, security domain knowledge, cross-portfolio roadmap experience, strong writing, influence, and AI tool proficiency.
SAST, SCA, IaC, CI/CD, ASPM, AI tools
Job PostingView all
1mo
Save
Mark Applied
Hide
Sr. Software Developer
Austin or United States
OnsiteFull Time
Revionics
Revionics: AI-powered lifecycle price optimization software for global retailers.
5+ YOE5+ years software engineering experience building scalable cloud-native, microservices-based backend systems. Strong Node.js and TypeScript skills (NestJS), async workflows, LLM integration, containerization, CI/CD, relational and NoSql databases, cloud (GCP/AWS) exposure.
BigQuery, Cloud Functions, Pub/Sub, Node.js, NestJS, TypeScript, Apigee, Backstage, Docker, Kubernetes, GitLab, Claude Code, LangChain, LlamaIndex, SAST, SCA, NoSql
Job PostingView all
2mo
Save
Mark Applied
Hide
SW Engineer
Austin, Texas, United States
OnsiteFull Time
Retym
Retym: Developing coherent DSP silicon for AI data center infrastructure.
10+ YOE10+ years embedded software experience with C, Python, Shell; Embedded Linux and Windows familiarity; expertise in testing frameworks, multi-threading, SPI, and system integration for SDKs.
C, Python, Shell, Embedded Linux, Windows, SPI, Git, Jenkins, GitHub Actions, GitLab, SAST, GWeb
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Platform Software Engineer
Austin or Nashville
$93k-$210k/yr OnsiteFull Time
Oracle
OracleNYSE: ORCL: Provides cloud infrastructure and enterprise software for global businesses.
4+ YOE4+ years building and operating distributed services; strong development in Java, C++, C#, or Go; solid CS fundamentals; experience with production operations, monitoring, and distributed storage/NoSQL.
Java, C++, C#, Go, Kubernetes, OCI, Oracle Cloud, AWS, Azure, NoSQL, mTLS, IAM, SAST, DAST, CVE
Job PostingView all
1mo
Save
Mark Applied
Hide
Cybersecurity Software Engineer
Fairfax or Austin
$94k-$198k/yr HybridFull Time
CACI International
CACI InternationalNYSE: CACI: Provides information technology and engineering services for government agencies.
5+ YOEActive TS/SCI clearance, Bachelor's in CS/related, 5+ years cyber engineering experience (2+ with modern software), Kubernetes and secure SDLC experience, Ansible and scripting, Sec+ (or obtain within 90 days).
Kubernetes, Ansible, SIEM, SAST, DAST, SCA, STIG, SRG, CIS benchmarks, SBOM, RBOM, TCP/IP, IaC, PaaS, DevSecOps
Job PostingView all
2mo
Save
Mark Applied
Hide
Founding Security Engineer
Austin, Texas, United States
$120k-$180k/yr OnsiteFull Time
Boom
Boom: Fintech building rental financial services for renters and property managers.
5+ YOE5+ years security engineering with hands-on web development; AWS preferred; strong SOC2/ISO27001 awareness; knowledge of OWASP; Ruby and React stack experience; ability to own security program.
AWS, SOC 2, ISO 27001, HIPAA, PCI, GLBA/FCRA, Ruby, React, Next.js, TypeScript, Terraform, SAST, DAST, SCA, OAuth, webhooks, observability
Job PostingView all
1w
Save
Mark Applied
Hide
Security Engineer, Application Security
Austin or San Diego
OnsiteFull Time
Saronic
Saronic: Building autonomous surface vessels for maritime defense operations.
5+ YOERequires 5+ years in application security, DevSecOps, or product security; secure SDLC, supply-chain security, secrets management, self-hosting, scripting, Infrastructure-as-Code, and ability to obtain U.S. security clearance.
SAST, DAST, SCA, CI/CD, SBOM, AWS, Azure, Infrastructure-as-Code
Job PostingView all

Explore Jobs

Expand Your Job Search