> Markdown version of [/jobs/ext/927729-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/927729-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Thoughtwave Software and Solutions
- **Location:** Houston, TX, United States
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Java (Programming Language), .NET Framework, Application Programming Interfaces (APIs), Microsoft Azure, Burp Suite, Computer Programming, Github, Python (Programming Language), Open Source Technology, Open Web Application Security, Fortify (Software), Secure Coding, SonarQube, Web Applications, Scripting, Veracode, Kubernetes, Checkmarx, Docker, Jenkins, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** June 22, 2026
- **Apply:** https://www.dice.com/job-detail/4a32433d-1538-43a6-a629-ffa23809dd03

## About the Role

* Strong experience with:

 * SAST tools (e.g., Checkmarx, Veracode, Fortify, SonarQube)
 * DAST tools (e.g., Burp Suite, OWASP ZAP)

Solid understanding of:

 * OWASP Top 10 / secure coding practices
 * Web application architecture (APIs, microservices)

Experience integrating security into:

 * CI/CD pipelines (Azure DevOps, GitHub, Jenkins, etc.)

Familiarity with:

 * Container security (Docker, Kubernetes)
 * Open-source scanning (SCA tools)

Programming/scripting knowledge (Java, Python, .NET, or similar)

Experience working with developers in an agile environment



## Related Videos

- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered)
- [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)