Job Description

Position Overview:

The Security Application Architect is a senior technical leader responsible for designing, governing, and advancing secure architectures across enterprise applications. This role embeds security throughout the application lifecycle and collaborates with engineering, product, cloud, infrastructure, and risk teams.

Key Responsibilities:͏͏

1. Application Security Architecture & Design

- Develop secure architecture blueprints and reference designs.

- Perform secure design reviews and threat modeling.

- Architect identity, data protection, API security, and isolation controls.

- Guide developers on secure coding patterns.

- Design and implement secure AI/GenAI architectures, ensuring appropriate controls for AI models, training data, inference pipelines, AI agents, and integrations across cloud and enterprise environments.

- Perform AI threat modeling and security assessments to identify and mitigate risks such as prompt injection, model poisoning, data leakage, unauthorized model access, adversarial attacks, and AI supply chain vulnerabilities.

- Establish and enforce AI governance and Responsible AI controls, including security-by-design principles, human oversight, auditability, explainability, regulatory compliance, and AI risk management frameworks.

- Define security standards for AI platforms and agents, including identity and access management, data protection, encryption, secrets management, monitoring, logging, and secure integration with enterprise security services.

- Lead AI security validation activities, including red teaming, adversarial testing, model assurance reviews, vulnerability assessments, and continuous monitoring to ensure AI solutions remain secure, resilient, and compliant throughout their lifecycle.

2. Governance & Standards

- Define application security standards and secure SDLC requirements.

- Establish policies, guardrails, and code quality gates.

- Ensure compliance with NIST, CIS, Zero Trust, HIPAA, PCI DSS, GDPR.

3. Threat Modeling & Risk Assessments

- Lead threat modeling workshops.

- Conduct security risk assessments for new products and design changes.

- Recommend compensating controls.

4. Security Engineering & Enablement

- Embed security in CI/CD pipelines (SAST, SCA, DAST, IaC scanning).

- Design secure APIs using OAuth2, OIDC, mTLS.

- Support identity provider integrations and secrets management.

5. Incident Response & Architecture Review

- Act as SME during incidents, assisting with forensics.

- Review logs and telemetry for architectural weaknesses.

- Lead post-incident hardening.

6. Technology Strategy & Innovation

- Evaluate new technologies and security tooling.

- Drive secure architecture modernization.

- Support cloud migration and digital transformation.

͏

 Required Qualifications:

- 8–10 years in application security or architecture roles.

- Expertise in cloud-native architectures, IAM, API security, data protection, K8s, DevSecOps.

- Knowledge of Java, .NET, Python, Node.js, or Go.

- Familiarity with OWASP Top 10, CWE, API Security Top 10.

Preferred Certifications:

- CISSP, CSSLP, CCSP, AWS/Azure Security Specialty.

- GIAC (GWAPT, GCSA, GCPN), SABSA, TOGAF.

Soft Skills:

- Strong communication, leadership, problem-solving, and stakeholder influence.

Success Measures (KPIs):

- Reduction of vulnerabilities.

- Adoption of secure patterns.

- Improved CI/CD security automation.

- Faster remediation of audit findings.