Application Security Architect
Accountabilities Security architecture and design: Review system architectures, technical designs, and source code to identify security vulnerabilities, architectural weaknesses, and potential risks before deployment.
Threat modeling and risk assessment: Lead threat modeling exercises and secure design reviews with engineering teams, using structured methodologies to identify threats and recommend appropriate mitigations.
Application security engineering: Apply secure coding principles and software security best practices across applications, services, and supporting infrastructure.
AI-assisted security workflows: Implement, evaluate, and improve AI-assisted workflows that support product security assessments and strengthen the efficiency of security operations.
Security initiative development: Define and lead security initiatives from proof of concept through implementation, adoption, and operational maturity.
Cloud and infrastructure security: Collaborate across application, cloud, infrastructure, and identity layers to improve security controls and support reliable, resilient systems.
Security documentation and reporting: Document security architectures, policies, standards, and best practices. Prepare clear reports and presentations tailored to both technical teams and executive stakeholders.
Technical leadership and mentorship: Provide technical guidance to security colleagues and engineering teams, helping strengthen their ability to recognize and address security risks.
Security culture development: Promote security awareness across the organization and support the evolution of the Security Champions program to encourage shared responsibility for secure design and development.
Continuous improvement: Evaluate security testing tools, methodologies, and emerging threats to continuously improve application security practices and organizational readiness.
Requirements
Professional experience: At least five years of experience in software security, including a minimum of two years in security architecture or offensive security roles.
Programming expertise: Proficiency in one or more programming languages, such as Java, Kotlin, or C++.
Application security fundamentals: Strong knowledge of authentication, authorization, cryptography, secure communications, and secure software design principles.
Security frameworks and methodologies: Experience with application security frameworks and threat modeling approaches, including OWASP, NIST, BSIMM, STRIDE, and DREAD.
Identity and access management: Hands-on experience with identity and access management technologies and protocols, including OAuth 2.0, SAML, and OpenID Connect (OIDC).
Cloud security: Knowledge of cloud security principles and practical experience with AWS environments.
Modern development and delivery practices: Familiarity with infrastructure as code (IaC), continuous integration and continuous delivery (CI/CD) pipelines, and security integration throughout the software development lifecycle.
Operating system security: Solid understanding of Linux and Windows security in enterprise environments.
Security testing and tooling: Experience using security testing methodologies and common application security tools to identify, assess, and mitigate vulnerabilities.
Education: A bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
Preferred certifications: Certifications such as OSCP, OSWE, or SecurityX are advantageous but not required.
Communication and collaboration: Excellent analytical, problem-solving, and communication skills, with the ability to explain complex security concepts to both technical and non-technical audiences.
Location and work eligibility: Must reside in an eligible U.S. state. Visa sponsorship is not available. Candidates residing within Chicago city limits are not eligible for this position unless they are willing to relocate independently.
Benefits
Competitive salary: For positions based in California, Colorado, Maryland, New Jersey, New York, and Washington, the stated annual base salary range is $140,000–$180,000. Compensation for other locations may vary based on location, experience, skills, and market conditions.
Remote flexibility: Work remotely from eligible U.S. states, with hybrid options available for candidates who prefer an office-based arrangement in Austin, Texas, or Tampa, Florida.
Healthcare coverage: Medical, dental, and vision insurance.
Retirement planning: Access to a 401(k) plan to support long-term financial goals.
Life insurance: Life insurance coverage as part of the benefits package.
Work-life balance: Unlimited paid time off (PTO).
Career development: Opportunities for professional growth, advancement, and ongoing development in application security and architecture.
Collaborative culture: Work alongside a supportive, curious, and collaborative team focused on innovation, continuous learning, and shared success.
How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1