Application Security Architect

About the role

The Application Security Architect will lead the design and operationalisation of Oceaneering’s enterprise application security programme. This role embeds security throughout the software development lifecycle, CI/CD pipelines and the broader developer ecosystem, working both virtually and on‑site in Houston as needed.

Key responsibilities

• Define and govern application security requirements, controls and assurance activities across the organisation.
• Partner with the Software Center of Excellence (SCOE) and engineering teams to integrate DevSecOps practices and Zero‑Trust principles.
• Establish an enterprise‑wide AppSec governance framework, including Secure SDLC, vulnerability management and remediation SLAs.
• Design and implement secure CI/CD pipelines with embedded SAST, SCA, DAST, secrets scanning and artifact provenance validation.
• Lead threat‑modeling, secure architecture and security defect management to provide a single pane of glass for application risk.
• Build and deliver role‑based security training and secure coding guidance for developers, architects and QA.

Required profile

• Minimum 8 years of experience in cybersecurity with a focus on Application Security and DevSecOps.
• At least 5 years of hands‑on experience with SAST, DAST, SCA tools and CI/CD pipeline security.
• Experience building enterprise‑scale AppSec programmes and implementing Zero‑Trust principles.
• US Permanent Resident or Citizen status due to ITAR requirements.

Required skills

• SAST, DAST and Software Composition Analysis (SCA) tools
• GitHub and CI/CD pipeline orchestration
• Artifact repository management
• Secure SDLC frameworks
• Zero‑Trust architecture concepts
• Familiarity with NIST, OWASP SAMM and BSIMM standards