Application Security Engineer

Application Security Engineer (SAST/DAST Focus)
Location: Houston, TX (Remote Eligible) | Job Type: C2C

About the Role
Join Chevron's forward-thinking cybersecurity team as an Application Security Engineer focused on SAST/DAST. Drive secure software development, integrate security into DevOps, and make a measurable impact on enterprise risk reduction. This is your opportunity to advance your career in a collaborative, innovation-driven environment dedicated to modern security practices.

Responsibilities

- Implement, manage, and optimize SAST and DAST tools (Checkmarx, Veracode, Fortify, SonarQube, Burp Suite, OWASP ZAP) across multiple application environments
- Integrate automated security testing into CI/CD pipelines (Azure DevOps, GitHub, Jenkins) to enable true DevSecOps
- Conduct code reviews and vulnerability assessments to ensure robust, secure applications
- Identify, triage, and remediate vulnerabilities with a focus on the OWASP Top 10
- Collaborate with development teams to embed secure coding best practices into SDLC
- Support threat modeling and security design review initiatives
- Monitor and report on application security posture and emerging risk trends
- Provide expert assistance in application-related security incident response

Required Skills and Experience

- Proficient with SAST and DAST tools
- In-depth knowledge of OWASP Top 10 and secure coding practices
- Experience integrating security into CI/CD pipelines
- Strong understanding of web application architecture (APIs, microservices)
- Familiarity with container security (Docker, Kubernetes)
- Hands-on with open-source scanning tools (SCA)
- Programming or scripting experience (Java, Python, .NET)
- Proven collaboration with developers in agile environments

Preferred Skills

- Experience with cloud security (especially Azure)
- Exposure to Infrastructure-as-Code (IaC) security scanning
- Security certifications (CSSLP, GWAPT, Security+)

Benefits

- Dynamic, high-impact projects in the energy sector
- Opportunities for career growth and upskilling in the latest security technologies
- Supportive, diverse, and collaborative team environment
- Remote work flexibility

How to Apply
Ready to power Chevron's secure digital future? Submit your resume and a brief cover letter outlining your application security accomplishments via our application portal.