AVP, Cyber Application Security Architect
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cyber application security architect securing SaaS, cloud infrastructure, and software development lifecycles. Driving secure-by-design reviews, DevSecOps, threat modeling, and AI/ML security guidance.
Responsibilities:
- Serve as the security architecture authority within the architecture organization
- Partner with product architects, principal engineers, cloud partners, and business leaders to embed secure-by-design principles into hardware appliances, multi-tenant SaaS platforms, and globally distributed cloud infrastructure
- Coach and support developers in writing secure code and using secure patterns, frameworks, and libraries
- Provide architecture, implementation, and operational guidance and promote secure-by-default approaches
- Triage SAST, SCA, DAST, container, and IaC scanning findings; validate and resolve false positives; and help prioritize true risk
- Tune security tools, reduce noise, and improve signal quality through rules, suppressions, baselines, and exception processes
- Drive adoption of CNAPP, CWPP, WAF, service mesh security, API gateways, SIEM/SOAR, and cloud-native telemetry
- Conduct Secure by Design reviews for new applications and material changes
- Lead threat modeling workshops, identify abuse cases and attack paths, and document mitigations and residual risk
- Review authentication/authorization, data flows, secrets handling, logging/monitoring, and resiliency controls
- Provide recommendations and track follow-through with engineering teams
- Translate FedRAMP, SOC2, ISO 27001, NIST SP 800-53, CSA CCM, and SOX requirements into measurable security architecture controls
- Advise on CI/CD pipeline hardening, least privilege, artifact integrity, signing, provenance, and secure deployment patterns
- Advise on third-party dependency security, supply chain controls, SCA governance, and patch/vulnerability management
- Integrate security controls into developer workflows with automation and self-service
- Provide security architecture guidance for AI/ML and GenAI-enabled applications
- Help implement data protection, access control, monitoring, and abuse-prevention controls for AI/ML features
- Act as a trusted partner to product, engineering, and leadership
- Create and maintain secure coding guidance, reference architectures, and reusable patterns
- Contribute to incident root cause analysis and preventative design improvements
Requirements:
- 8+ years related IT experience
- 5+ years' experience in security application tools
- 6+ years' experience in application security reviews of new architecture
- 5+ years of experience with public and hybrid cloud environments (AWS, Azure and GCP)
- Strong software development background with the ability to read, understand, and advise on production code and design decisions
- Demonstrated expertise in threat modeling and secure architecture review for modern web and API-based applications
- Expertise securing CI/CD and SDLC processes, including pipeline security, secrets management, artifact integrity, build/release controls, and automation
- Experience with application security tooling and processes, including SAST/SCA/DAST and related scanning in pipelines
- Working knowledge of AI/ML security risks and mitigations for applications using ML models or GenAI components
- Strong collaborative and consulting skills; ability to influence without authority, communicate clearly, and deliver pragmatic, developer-friendly recommendations
- Bachelor's Degree
Similar Jobs
Senior Cybersecurity Disaster Recovery, Contingency Planning SME
Cybersecurity DRCP SME leading nationwide BIA, DRP, and contingency planning programs. Supporting government agencies in strengthening national security and improving public services.
Cloud Specialist – Security SSR
Cloud Security Specialist securing AWS infrastructure for major Latin American companies. Designing AWS governance, network protection, compliance, automation, and incident remediation.
Senior Cybersecurity Architect
Senior Cybersecurity Architect governing Zero Trust, AWS, DevSecOps, and AI security architecture. Reducing cyber risk across HomeServe’s home-services technology and integrations.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer securing HomeServe’s enterprise systems, infrastructure, and business operations. Leading risk assessments, security architecture, incident response, compliance, and cybersecurity innovation.
AWS Cloud Security Engineer
AWS Cloud Security Engineer securing Peraton’s FedRAMP-authorized AWS infrastructure. Implementing cloud controls, continuous compliance, and ATO support for national security missions.
Security Engineer – CrowdStrike Falcon
Senior CrowdStrike CNAPP engineer configuring cloud, Kubernetes, and container security for a cybersecurity consulting firm. Securing government and enterprise environments through hands-on Falcon implementation.
Technical Advisor II – Food Security, Livelihoods and Markets
Remote CRS technical advisor leading Sudan’s World Bank-funded Food and Nutrition Security Plan. Advising global food security, livelihoods, and market-based humanitarian programming.
Manager, Application Security, SOX
Application Security and SOX Manager securing Oracle Fusion, EPM, and OIC environments. Ensuring access governance, Segregation of Duties, and compliance for Paramount’s global media business.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s application and pipeline security for its media insights business. Driving AWS governance, AI-driven DevSecOps, automated remediation, and security engineering team performance.
Senior Security Engineer
Senior Security Engineer monitoring and responding to threats across Cision’s cloud, identity, endpoint, and Linux environments. Cision provides PR, marketing, and social media management technology.
Information Security Control Assurance Analyst
Information security analyst assuring controls, audits, and compliance for Southern New Hampshire University. Managing risk assessments, SSPs, POA&Ms, audits, and governance reporting remotely.
Security Engineer – Manager
Security Engineering Manager leading zero-trust, IAM, collaboration, and AI workspace security for Binance’s global blockchain ecosystem. Building secure platforms and leading distributed engineering teams.
Principal Security Engineer
Principal Security Engineer reviewing FedRAMP cloud architectures, authorization packages, and security controls. Advising government programs and Cloud Service Providers on NIST compliance and risk.
Senior Cybersecurity Risk & Resilience Consultant
Senior cybersecurity risk consultant assessing technology, cloud, and third-party risks. Strengthening risk frameworks and advising stakeholders on resilience, compliance, and remediation.
Senior Cybersecurity Governance Consultant
Senior Cybersecurity Governance Consultant strengthening an organization’s cybersecurity frameworks, policies, controls, and compliance. Managing governance reporting, exceptions, audits, and regulatory-readiness initiatives.
Cybersecurity Compliance, Technical Controls Consultant
Cybersecurity consultant assessing technical controls, cloud, infrastructure, and regulatory compliance. Managing audits, remediation, evidence, policies, and metrics for a two-year engagement.
Fraud Security Specialist
Fraud Security Specialist protecting CoinPoker’s blockchain-based crypto-poker platform from fraud, money laundering, cheating, and account abuse. Investigating cases, managing transaction queues, and reporting fraud trends.
Senior/Lead – Cyber Security – IAM Engineer, Identity and Governance
Lead IAM Engineer designing cloud-based identity governance and access platforms for FICO, a global analytics software company. Strengthening enterprise security through IAM, PAM, federation, and least-privilege controls.
Information Security Engineer
Information Security Engineer supporting Cisco’s cloud compliance certifications, audits, and security frameworks. Building scalable compliance capabilities across Cisco Cloud offerings.
Security Architect
Security Architect defining API, identity, encryption and integration controls for Intelance’s enterprise architecture and cybersecurity consultancy. Delivering a focused UK programme security review remotely.