Application Security Architect

We’re looking for a detail-oriented, analytical, and collaborative professional with strong communication skills and the ability to influence and guide teams. Someone who combines technical depth with problem-solving, ownership, and the ability to work both independently and as part of a cross-functional environment.

As an Application Security Architect, you will play a key role in helping customers secure their applications and systems. You will partner closely with R&D, Product, and DevOps teams to identify vulnerabilities, review architecture and code, recommend mitigations, and ensure products meet the highest security standards.

What You Will Do

• Conduct threat modeling, architecture and design reviews to identify security risks and propose effective solutions.
• Define both high-level and detailed security requirements for new and existing features in collaboration with Product, R&D, and DevOps teams.
• Perform manual and automated secure code reviews to identify security vulnerabilities.
• Prepare clear, professional reports detailing findings, risk assessments, and mitigation recommendations.
• Provide ongoing guidance on secure development practices (SSDLC) and support teams in adopting secure coding principles.
  
  

• 2+ years of hands-on experience in application security, with strong familiarity with the Secure Software Development Life Cycle (SDLC).
• Solid understanding of application security vulnerabilities and standards (OWASP Top 10, NIST, SANS, etc.).
• 2+ years of programming experience.
• Experience performing system architecture reviews, design reviews, and threat modeling.
• Demonstrated ability in reviewing application code for security issues.
• Strong knowledge of secure coding best practices and the ability to guide engineering teams.
• Excellent English communication skills—verbal, written, and technical.
• Ability to thrive in a dynamic environment with tight timelines.
• Team-oriented mindset paired with the ability to operate independently when needed.
  
  

• Security certifications such as CEH, OSCP.
• Practical experience implementing SSDLC processes in product organizations.