Application Cybersecurity Architect

We're looking for a skilled and visionary Application Security Architect, with a strong grasp of system architecture and secure development practices. This role blends hands-on architecture with strategic security implementation across our development lifecycle.

• Designing secure application architectures and modeling solutions
• Leading the implementation of DevSecOps methodologies
• Writing and reviewing technical documentation and security policies
• Performing security assessments on apps and systems
• Implementing SSDLC controls and processes (SAST, DAST, SCA, etc.)
• Collaborating with development and infrastructure teams to embed security into our software delivery
• Ensuring compliance with security regulations and frameworks (e.g., OWASP, NIST, ISO27001, PCI, GDPR)

The role includes 1–2 days/week of on-site visits to our partner software vendors.

What we’re looking for:

• 2–3 years of hands-on application security experience
• Strong understanding of SSDLC and SecDevOps best practices
• Familiarity with SAST / DAST / SCA tools
• Experience in one or more programming languages: Java, .NET, Python, C, JavaScript
• Proven experience with high-level system architecture and design
• Deep knowledge of security methodologies such as OWASP Top 10, NIST
• Strong analytical and communication skills
• Civilian tech experience preferred (not military background)
• Advantage: prior experience in software development
• Advantage: relevant certifications (e.g., CISSP, CSSLP)

Our Application Security team works closely with development and system teams to deliver secure, high-impact products used by both internal teams and millions of external users.