Job Description and Requirements
The Principal Application Security Engineer will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233.
All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.
To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU.
- Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided).
- Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment
The Principal Application Security Engineer is an enterprise technical leader responsible for shaping and scaling application and product security strategy across the organization. The role leads the most complex and consequential security architecture decisions, establishes secure engineering standards and reference architectures, and creates platform-level capabilities that make secure development the default. The Principal Engineer influences senior technology leaders, mentors security and engineering talent, addresses emerging risks, and drives measurable improvements across the software ecosystem.
Essential Functions and Responsibilities:
- Define the multi-year technical strategy, target state, standards, and capability roadmap for application and product security in alignment with business and technology priorities.
- Lead security architecture, threat modeling, and design decisions for the organization’s highest-risk, most complex, or most strategically important systems.
- Establish enterprise guardrails, secure defaults, paved paths, reference architectures, and engineering standards spanning applications, APIs, cloud, data, containers, identity, and infrastructure.
- Architect and guide the development of scalable application security platforms, automation, telemetry, risk analytics, and CI/CD controls used across the enterprise.
- Identify systemic risk patterns, anticipate emerging threats, and sponsor cross-functional programs addressing AI security, software supply chain risk, cloud-native security, and platform resilience.
- Provide authoritative technical guidance for critical vulnerabilities, security incidents, risk acceptances, acquisitions, major transformations, and executive-level technology decisions.
- Define measurement frameworks that connect engineering practices and security controls to risk reduction, business outcomes, developer experience, and operational effectiveness.
- Influence senior engineering, architecture, product, risk, and business leaders to prioritize and adopt strategic security improvements.
- Develop technical talent through mentorship, design and code review, communities of practice, succession planning, and raising expectations for engineering excellence.
- Represent the organization in industry forums, peer networks, strategic vendor engagements, or professional communities as appropriate.
- All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice)
Requirements:
- Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
- Minimum of 5 years of progressive experience in application security, product security, security engineering, software engineering, cloud security, or a related cybersecurity discipline.
- Demonstrated mastery of threat modeling, secure architecture, code review, application and API security, vulnerability management, cloud-native security, container security, and security automation.
- Proven experience designing or materially influencing large-scale platforms, distributed systems, cloud environments, developer platforms, or security engineering capabilities.
- Advanced software engineering capability in one or more production languages and a strong record of designing maintainable tooling, platforms, or controls.
- Ability to define strategy and technical standards while remaining sufficiently hands-on to evaluate designs, review critical code, guide prototypes, and resolve difficult engineering problems.
- Exceptional systems thinking and technical judgment, including the ability to make defensible decisions when data is incomplete and tradeoffs span security, reliability, delivery, cost, and customer impact.
- Executive-level written and verbal communication skills, with the ability to frame complex risk, build alignment, and influence decisions across organizational boundaries.
- Demonstrated leadership through influence, including mentoring senior engineers, resolving conflict, creating clarity in ambiguity, and sustaining momentum across long-running initiatives.
- High integrity, sound discretion, organizational awareness, and a consistent record of taking accountability for enterprise outcomes.
Skills / Certification / Licensing:
- Recognized enterprise authority who integrates deep expertise across software, architecture, cloud, data, identity, automation, and emerging technology.
- Defines strategic problems, creates direction, and operates with broad organizational trust and accountability.
- Resolves novel, high-consequence, systemic problems and establishes durable enterprise solutions.
- Shapes organization-wide technology decisions, engineering standards, investment priorities, and risk outcomes.
- Influences executives and senior technical leaders, reconciles competing priorities, and creates alignment across organizational boundaries.
- Multiplies organizational capability through strategy, standards, mentorship, communities of practice, and technical stewardship.
- Delivers measurable enterprise risk reduction, improved developer experience, stronger technical talent, and scalable secure-by-default capabilities.
