Principal Application Security Engineer

Randolph-Brooks Federal Credit Union is hiring a Principal Application Security Engineer to help shape and scale enterprise application and product security. This hybrid role supports secure development becoming the default by building secure engineering standards, platform-level capabilities, and measurable risk reduction across the organization.

In this position, you will define a multi-year security strategy and partner with engineering, architecture, product, risk, and business leaders to prioritize and adopt security improvements. You will lead complex security architecture decisions, establish enterprise guardrails across applications and platforms, and guide the development of scalable security automation, telemetry, and CI/CD controls.

Responsibilities

• Define the multi-year technical strategy, target state, standards, and capability roadmap for application and product security aligned to business and technology priorities.
• Lead security architecture, threat modeling, and design decisions for the highest-risk, most complex, or most strategically important systems.
• Establish enterprise guardrails, secure defaults, paved paths, reference architectures, and engineering standards spanning applications, APIs, cloud, data, containers, identity, and infrastructure.
• Architect and guide scalable application security platforms, including automation, telemetry, risk analytics, and CI/CD controls used enterprise-wide.
• Identify systemic risk patterns, anticipate emerging threats, and sponsor cross-functional programs for AI security, software supply chain risk, cloud-native security, and platform resilience.
• Provide authoritative technical guidance for critical vulnerabilities, security incidents, risk acceptances, acquisitions, major transformations, and executive-level technology decisions.
• Define measurement frameworks that connect engineering practices and security controls to risk reduction, business outcomes, developer experience, and operational effectiveness.
• Influence senior leaders across engineering, architecture, product, risk, and business to prioritize and adopt strategic security improvements.
• Develop technical talent through mentorship, design and code review, communities of practice, succession planning, and raising expectations for engineering excellence.
• Represent the organization in industry forums, peer networks, strategic vendor engagements, or professional communities as appropriate.
• Other duties as assigned, with responsibilities and essential functions subject to change.

Requirements

• Bachelor’s degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field, or an equivalent combination of education and experience.
• Minimum of 5 years of progressive experience in application security, product security, security engineering, software engineering, cloud security, or a related cybersecurity discipline.
• Demonstrated mastery of threat modeling, secure architecture, code review, application and API security, vulnerability management, cloud-native security, container security, and security automation.
• Proven experience designing or materially influencing large-scale platforms, distributed systems, cloud environments, developer platforms, or security engineering capabilities.
• Advanced software engineering capability in one or more production languages, with a strong track record designing maintainable tooling, platforms, or controls.
• Ability to define strategy and technical standards while staying hands-on to evaluate designs, review critical code, guide prototypes, and resolve difficult engineering problems.
• Exceptional systems thinking and technical judgment, including making defensible decisions with incomplete data while balancing security, reliability, delivery, cost, and customer impact.
• Executive-level written and verbal communication skills to frame complex risk and build alignment across organizational boundaries.
• Demonstrated leadership through influence, including mentoring senior engineers, resolving conflict, creating clarity in ambiguity, and sustaining momentum across long-running initiatives.
• High integrity, sound discretion, organizational awareness, and a consistent record of taking accountability for enterprise outcomes.

Work Location and Home Requirements

• Hybrid schedule (remote/onsite) after an initial training period.
• Training takes place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233 (time frame may vary).
• All applicants must reside within Texas and be able to perform all work from home in Texas.
• To work from home, employees must have internet access meeting RBFCU’s minimum requirements.
• Must have a reliable home internet provider and the ability to hardwire a connection directly to the modem (Ethernet cable provided).
• Must provide a safe, suitable, distraction-free workspace at home.