Application Security Architect

We're Hiring: Application Security Architect (Product Security)

Our Application Security team works closely with engineering, IT, and support teams to deliver secure, high-quality products used by millions of users worldwide. We’re looking for a skilled and motivated Application Security Architect to join our growing team of 2 architects and 2 penetration testers. We also collaborate regularly with external partners.

🔐 About the Role:

As an Application Security Architect, you will take a leading role in shaping and implementing our application security strategy. You’ll be responsible for:

• Performing threat modeling and security assessments of existing systems
• Integrating and managing secure development tools (SAST, DAST, SCA, etc.) across the SDLC
• Developing and maintaining security policies, standards, and best practices
• Collaborating with development and infrastructure teams to ensure secure architecture and design
• Supporting secure software development lifecycle (SSDLC) practices
• Working with external development vendors to uphold security standards
• Ensuring compliance with industry regulations and security frameworks (e.g., NIST, OWASP, ISO27001)

🧩 Requirements:

• 4–6 years of hands-on experience in Application Security
• Deep understanding of SSDLC, secDevOps practices, and tools such as SAST, DAST, SCA
• Proficiency in one or more programming languages (e.g., C, .Net, Java, Python, JavaScript)
• Experience with distributed system architectures, both on-premise and cloud environments
• Solid understanding of security principles and standards (e.g., OWASP Top 10, NIST)
• Strong analytical and problem-solving skills
• Excellent communication and collaboration abilities
• Self-starter with a growth mindset and a passion for teamwork

✅ Nice to Have:

• B.Sc. in Computer Science or Information Security
• Relevant certifications (e.g., CISSP, CSSLP)
• Experience conducting security reviews and risk assessments
• Familiarity with industry regulations such as ISO27001, PCI, GDPR