Senior Engineer – Cybersecurity Application Security
OneMain Financial1 day ago
Irving, TX, USASenior
Responsibilities
- Implement, administer, and continuously improve application security tooling supporting secure software development.
- Integrate security testing and security controls into software delivery pipelines and engineering workflows.
- Develop and maintain application security standards, policies, procedures, documentation, and operational guidance.
- Analyze security findings, operational metrics, and compliance trends to identify risks and improvement opportunities.
- Partner with engineering and cybersecurity stakeholders to improve secure-by-design and secure-by-default development practices.
- Support secure SDLC governance, vulnerability management, compliance reporting, and remediation tracking.
- Secure APIs across their development lifecycle, including discovery, authentication and authorization validation, schema and contract testing, abuse-case analysis, and remediation guidance.
- Contribute to security automation initiatives and secure AI-assisted software development workflows.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
- At least 5 years of application security engineering experience.
- Experience implementing and administering SAST, DAST, SCA, IAST, container security, API security testing, and software supply chain security capabilities.
- Experience integrating security tooling and automated security controls into CI/CD pipelines using infrastructure-as-code.
- Experience supporting secure SDLC governance, policy enforcement, compliance reporting, and remediation management.
- Working knowledge of application security principles, secure coding practices, OWASP Top 10 risks, and vulnerability remediation techniques.
- Experience developing and maintaining technical standards, procedures, policies, and security documentation.
- Ability to independently manage moderately complex security initiatives and influence technical stakeholders.
- Preferred certifications include CSSLP, GSEC, CISSP, GWAPT, or similar.
- Preferred experience includes regulated financial services environments, AI-assisted development security controls, security automation and scripting, workflow orchestration, and security metrics and dashboards.
Categories
About OneMain Financial
OneMain Financial is a U.S. consumer lender providing personal loans, credit cards, and related services primarily for nonprime borrowers, delivered online and through 1,300+ branches. The company earns revenue from interest and fees on consumer lending products. Founded in 1912, it is headquartered in Baltimore, MD, and trades on the NYSE under the ticker OMF.