ZipRecruiter

Log In

1

Appsec Jobs in Houston, TX (NOW HIRING)

Qualys

Lead Cyber Risk Solutions Advisor

Houston, TX · On-site

$155K - $175K/yr

Experience with one or more vulnerability management, CNAPP, appsec, or cyber threat exposure management platforms. Preferred: * Experience working in a SOC, MSSP, or cyber advisory function.

The Friedkin Group

DevSecOps Engineer

Houston, TX

Partner with AppSec and product teams on threat modeling, secure design reviews, and remediation. * Contribute to compliance initiatives (SOC 2/ISO 27001) with evidence automation and configuration ...

The Friedkin Group

DevSecOps Engineer

Houston, TX · On-site

Partner with AppSec and product teams on threat modeling, secure design reviews, and remediation. * Contribute to compliance initiatives (SOC 2/ISO 27001) with evidence automation and configuration ...

The Friedkin Group

DevSecOps Engineer

Houston, TX · On-site

Partner with AppSec and product teams on threat modeling, secure design reviews, and remediation. * Contribute to compliance initiatives (SOC 2/ISO 27001) with evidence automation and configuration ...

Deloitte

Cyber Manager - Cloud DevSecOps

Houston, TX · On-site

$106K - $143K/yr

... AppSec, vulnerability management, and developer workflows * Establish secure AI/Agentic AI governance and guardrails, AI threat Modeling, identity and data protection, prompt-injection controls ...

The Friedkin Group

DevSecOps Engineer

Houston, TX · On-site

$140 - $190/hr

Partner with AppSec and product teams on threat modeling, secure design reviews, and remediation. * Contribute to compliance initiatives (SOC 2/ISO 27001) with evidence automation and configuration ...

All JobsAppsec JobsAppsec Jobs in Houston, TX

Appsec information

What is the difference between Appsec vs Security Analyst?

AspectAppsecSecurity Analyst
Required CredentialsCertifications like CISSP, CEH, OSCP; knowledge of secure codingCertifications such as Security+, CISSP; threat analysis skills
Work EnvironmentDevelopment teams, secure coding practices, application testingMonitoring security systems, incident response, risk assessment
Employer & Industry UsageTech companies, software firms, organizations with application security needsAll industries, including finance, healthcare, government, focusing on security monitoring

Appsec professionals focus on securing applications through secure coding, testing, and vulnerability management, while Security Analysts monitor and respond to security threats across systems. Both roles require security certifications and work in overlapping environments, but their core responsibilities differ in scope and focus.

Is Appsec entry level?

Application security (AppSec) roles can be entry-level or require experience, depending on the position. Entry-level AppSec jobs typically focus on basic security practices, vulnerability assessments, and may require foundational knowledge of security tools and programming. More advanced roles often demand prior experience, certifications, or specialized skills in areas like penetration testing or secure coding.

Is application security in demand?

Application security (AppSec) professionals are in high demand due to increasing cyber threats and the widespread adoption of digital services. Organizations seek skilled experts to identify vulnerabilities, implement security measures, and ensure compliance, often requiring knowledge of security tools, coding, and certifications like CISSP or CEH.

Will AI replace appsec engineers?

AI is unlikely to fully replace application security (AppSec) engineers, as their role involves complex analysis, decision-making, and understanding of context that current AI tools cannot replicate. Instead, AI can augment their work by automating routine tasks like vulnerability scanning and code analysis, allowing engineers to focus on more strategic security measures. Continuous learning and expertise in security tools, coding, and threat assessment remain essential for AppSec professionals.

What are popular job titles related to Appsec jobs in Houston, TX?

For Appsec jobs in Houston, TX, the most frequently searched job titles are:

What job categories do people searching Appsec jobs in Houston, TX look for?

The top searched job categories for Appsec jobs in Houston, TX are:

What cities near Houston, TX are hiring for Appsec jobs?

Cities near Houston, TX with the most Appsec job openings:

Appsec jobs near you
Infographic showing various Appsec job openings in Houston, TX as of August 2026, with employment types broken down into 91% Full Time, 4% Part Time, and 5% Contract. Highlights an 66% Physical, 10% Hybrid, and 24% Remote job distribution.

Lider de Seguridad Aplicativa (Houston)

Houston, TX • On-site

Empresa Confidencial
See more jobs at Empresa Confidencialexternal

Full-time

This job post has expired today. Applications are no longer accepted.

Job description

Somos una empresa líder en plataformas de pagos electrónicos B2B con operaciones en América Latina y Estados Unidos. Fundada originalmente en Monterrey, México, la compañía ha experimentado un crecimiento significativo y actualmente tiene su sede corporativa en Houston, Texas.

Conectamos bancos, fintechs y comercios a través de una infraestructura financiera que facilita remesas internacionales, procesamiento de pagos y servicios financieros embebidos.

Nuestra cultura organizacional es emprendedora, dinámica y orientada a la ejecución. Buscamos líderes capaces de combinar el pensamiento estratégico con un enfoque práctico para la resolución de problemas, impulsando resultados y generando un impacto tangible en el negocio.

Líder de Seguridad de Aplicaciones (AppSec Lead)

Buscamos un/a Líder de Seguridad de Aplicaciones para definir y liderar la estrategia de AppSec de la organización, integrando la seguridad desde el diseño en todo el ciclo de vida del software (SDLC/SSDLC).

Esta persona será responsable de construir y madurar el programa de AppSec, liderar un equipo de ingenieros de seguridad, y actuar como punto de referencia técnico y estratégico ante desarrollo, arquitectura, producto y liderazgo ejecutivo.

  • Definir la estrategia, roadmap y KPIs del programa de AppSec, alineados a los objetivos del negocio y apetito de riesgo.
  • Liderar, mentorear y desarrollar al equipo de ingenieros de seguridad de aplicaciones (junior/mid).
  • Establecer y evolucionar el modelo de revisión de arquitectura como parte del SDLC.
  • Definir estándares y políticas de codificación segura, y asegurar su adopción a través de los equipos de desarrollo.
  • Seleccionar, implementar y optimizar el stack de herramientas (SAST, DAST, SCA, IAST, secrets scanning) y su integración en pipelines CI/CD.
  • Diseñar y supervisar el proceso de gestión del ciclo de vida de vulnerabilidades: identificación, priorización, SLAs de remediación y reporting a stakeholders.
  • Liderar o coordinar pruebas de penetración (internas o con terceros) y ejercicios de red teaming enfocados en aplicaciones.
  • Impulsar cultura de seguridad mediante capacitaciones, security champions y colaboración cercana con equipos de desarrollo y producto.
  • Asegurar cumplimiento con marcos regulatorios y estándares relevantes (OWASP SAMM/ASVS, ISO 27001, PCI-DSS, SOC 2, según aplique).
  • Reportar métricas, riesgos y avances del programa a liderazgo (CISO, VP Engineering, etc.).
  • Evaluar riesgos de terceros/proveedores relacionados con aplicaciones y APIs.
  • 6-8+ años de experiencia en seguridad de aplicaciones, con al menos 2-3 años liderando equipos o programas.
  • Experiencia sólida en desarrollo de software y arquitecturas modernas (cloud, microservicios, APIs, contenedores).
  • Dominio profundo de seguridad ofensiva y defensiva: threat modeling, pentesting, secure code review.
  • Experiencia liderando la selección e integración de herramientas SAST/DAST/SCA (ej. SonarQube, Checkmarx, Fortify, Burp Suite, Snyk, Veracode) en pipelines DevSecOps.
  • Conocimiento profundo de OWASP Top 10, OWASP ASVS/SAMM, CWE, MITRE ATT&CK.
  • Experiencia gestionando programas de vulnerabilidades a escala y definiendo SLAs de remediación con equipos de desarrollo.
  • Habilidades de liderazgo, gestión de stakeholders y comunicación efectiva con audiencias técnicas y ejecutivas.
  • Deseable: certificaciones como OSCP, CISSP, GWAPT, CSSLP o similares.
  • Deseable: experiencia con cloud security (AWS/Azure/GCP) y seguridad en contenedores/Kubernetes.
#J-18808-Ljbffr

Apply