Description

You will design, implement, and govern enterprise-wide application security architecture and standards, embedding security throughout the software development lifecycle.

This role is hybrid.

Responsibilities

• Design and establish enterprise application security frameworks, reference models, and security baselines for web, mobile, API, and cloud-native environments.
• Lead architecture and design reviews, utilizing threat modeling methodologies (STRIDE, PASTA) to identify gaps and recommend mitigations.
• Define secure coding standards and implement security guardrails for containerized, serverless, and infrastructure-as-code deployments.
• Architect solutions for authentication, authorization, encryption, and API security, integrating principles into CI/CD pipelines for DevSecOps.
• Evaluate and recommend application security tools (SAST, DAST, IAST, SCA) and leverage GenAI to enhance security analysis and automation.

Required Skills

• 7+ years of experience in application security, including 2+ years in security architecture roles.
• Strong knowledge of secure design principles, OWASP Top 10, SANS CWE, and common vulnerability patterns.
• Experience designing security controls for cloud environments (AWS, Azure, GCP) and securing modern architectures (microservices, SPA, distributed systems).
• Proficiency in evaluating and implementing application security tools such as Burp Suite, OWASP ZAP, SAST, DAST, IAST, and SCA.
• Hands-on experience with at least one programming language: Java, Python, or JavaScript.
• Deep understanding of authentication and authorization mechanisms (MFA, SSO, OAuth 2.0, SAML, OIDC) and secure API design.
• Experience implementing secure SDLC and DevSecOps practices, including secure code review and vulnerability identification.

Preferred Skills

• Experience leveraging GenAI technologies to automate aspects of security analysis and architecture reviews.
• Strong communication skills with the ability to explain complex security concepts to engineering teams and stakeholders.

Key Skills

Education

Any Graduate