Cyber Security Engineer
robert halfTulsa (OK)
About the role
A leading mortgage company is seeking a talented Application Security Engineer to help secure internally developed applications, APIs, and software delivery processes. This role partners with engineering, architecture, and DevOps teams to embed security throughout the SDLC and strengthen secure-by-design practices. Position is 100% remote and comes with strong company benefits. This is a direct hire position; candidate must be eligible to work in the United States.
Responsibilities:
Perform threat modeling, secure design reviews, and architecture assessmentsReview SAST, DAST, SCA, and secrets scanning results; support risk-based remediationHelp define secure coding standards, guardrails, and security patternsGuide developers on secure coding and vulnerability remediationSupport security testing for web, API, and cloud applicationsMaintain and improve AppSec tools and CI/CD security integrationsDeliver developer security training and support audit and compliance efforts.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.