Application Security Architect

Lead secure application design and embed security across the SDLC - from threat modeling to CI/CD.About the RoleLead secure application design and support development teams throughout the SDLC. You'll integrate and optimize security controls such as SAST, DAST, SCA, and secrets scanning within CI/CD pipelines, review security findings, perform threat modeling, and work with engineering teams to prioritize and implement effective mitigations.What You'll DoDesign and review secure application architectures across web, API, microservices, and AI-enabled environments.Perform threat modeling and hands-on security reviews focused on the OWASP Top 10, API risks, business logic flaws, and data exposure.Review application code, architecture, and security controls to identify practical risks and remediation paths.Help engineering teams embed security into the SDLC, including SAST, DAST, SCA, and CI/CD security controls.Translate technical vulnerabilities into clear business risks for product, engineering, and executive stakeholders.Requirements: 4+ years in cybersecurity, with strong application security or secure software development experience.Proven experience designing secure application architectures and reviewing complex application ecosystems.Ability to audit code in at least one programming language.Hands-on experience with threat modeling methodologies, such as STRIDE.Experience with SAST, DAST, SCA, findings triage, and guiding engineers through remediation.Strong understanding of modern application stacks, including APIs, microservices, cloud-native applications, and AI/LLM integrations.Excellent communication skills with engineers, product teams, and leadership.This position is open to all candidates.