Application Security Architect

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Application Security Architect based in the United States. We are looking for a technically skilled security professional to strengthen application security and embed secure design principles throughout the software development lifecycle. In this role, you will collaborate with engineering, platform, and product teams to identify vulnerabilities, assess architectural risks, and develop resilient security solutions. You will lead threat modeling, security architecture reviews, and code assessments while helping integrate security into cloud infrastructure, identity systems, and modern delivery pipelines. You will also contribute to AI-assisted product security workflows and guide initiatives from initial proof of concept through operational maturity. Beyond hands-on technical work, you will mentor engineers, promote security awareness, and help establish consistent secure development practices across the organization. This is an opportunity to influence security strategy at scale while working in a collaborative, innovative, and remote-friendly environment.

Security architecture and design: Review system architectures, technical designs, and source code to identify security vulnerabilities, architectural weaknesses, and potential risks before deployment. Threat modeling and risk assessment: Lead threat modeling exercises and secure design reviews with engineering teams, using structured methodologies to identify threats and recommend appropriate mitigations. Application security engineering: Apply secure coding principles and software security best practices across applications, services, and supporting infrastructure. AI-assisted security workflows: Implement, evaluate, and improve AI-assisted workflows that support product security assessments and strengthen the efficiency of security operations. Security initiative development: Define and lead security initiatives from proof of concept through implementation, adoption, and operational maturity. Cloud and infrastructure security: Collaborate across application, cloud, infrastructure, and identity layers to improve security controls and support reliable, resilient systems. Security documentation and reporting: Document security architectures, policies, standards, and best practices. Prepare clear reports and presentations tailored to both technical teams and executive stakeholders. Technical leadership and mentorship: Provide technical guidance to security colleagues and engineering teams, helping strengthen their ability to recognize and address security risks. Security culture development: Promote security awareness across the organization and support the evolution of the Security Champions program to encourage shared responsibility for secure design and development. Continuous improvement: Evaluate security testing tools, methodologies, and emerging threats to continuously improve application security practices and organizational readiness. Requirements Professional experience: At least five years of experience in software security, including a minimum of two years in security architecture or offensive security roles. Programming expertise: Proficiency in one or more programming languages, such as Java, Kotlin, or C++. Application security fundamentals: Strong knowledge of authentication, authorization, cryptography, secure communications, and secure software design principles. Security frameworks and methodologies: Experience with application security frameworks and threat modeling approaches, including OWASP, NIST, BSIMM, STRIDE, and DREAD. Identity and access management: Hands-on experience with identity and access management technologies and protocols, including OAuth 2.0, SAML, and OpenID Connect (OIDC). Cloud security: Knowledge of cloud security principles and practical experience with AWS environments. Modern development and delivery practices: Familiarity with infrastructure as code (IaC), continuous integration and continuous delivery (CI/CD) pipelines, and security integration throughout the software development lifecycle. Operating system security: Solid understanding of Linux and Windows security in enterprise environments. Security testing and tooling: Experience using security testing methodologies and common application security tools to identify, assess, and mitigate vulnerabilities. Education: A bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience. Preferred certifications: Certifications such as OSCP, OSWE, or SecurityX are advantageous but not required. Communication and collaboration: Excellent analytical, problem-solving, and communication skills, with the ability to explain complex security concepts to both technical and non-technical audiences. Location and work eligibility: Must reside in an eligible U.S. state. Visa sponsorship is not available. Candidates residing within Chicago city limits are not eligible for this position unless they are willing to relocate independently. Benefits Competitive salary: For positions based in California, Colorado, Maryland, New Jersey, New York, and Washington, the stated annual base salary range is $140,000–$180,000. Compensation for other locations may vary based on location, experience, skills, and market conditions. Remote flexibility: Work remotely from eligible U.S. states, with hybrid options available for candidates who prefer an office-based arrangement in Austin, Texas, or Tampa, Florida. Healthcare coverage: Medical, dental, and vision insurance. Retirement planning: Access to a 401(k) plan to support long-term financial goals. Life insurance: Life insurance coverage as part of the benefits package. Work-life balance: Unlimited paid time off (PTO). Career development: Opportunities for professional growth, advancement, and ongoing development in application security and architecture. Collaborative culture: Work alongside a supportive, curious, and collaborative team focused on innovation, continuous learning, and shared success.