Application Security Architect

We are looking for an experienced Application Security Architect to lead application security architecture and secure development practices across a complex enterprise environment.

In this role, you will define security principles, guide technology projects throughout their lifecycle, promote Security by Design, and drive the implementation of advanced security controls across development and production environments.

Key Responsibilities

• Define and lead application security architecture for new and existing systems.
• Provide security guidance throughout the full project lifecycle—from initiation and design through implementation and production.
• Lead and continuously improve the organization’s Secure Software Development Lifecycle (Secure SDLC).
• Define security requirements for applications, information systems, and development projects.
• Establish secure coding guidelines and support their adoption across development teams.
• Conduct security architecture reviews and recommend secure design solutions.
• Manage and support the remediation of security findings identified through code reviews, vulnerability assessments, and AppSec tools.
• Promote automation of security controls and processes through integration with internal and external platforms.
• Develop and implement application security policies, standards, procedures, and methodologies.
• Collaborate closely with Development, Architecture, Infrastructure, Cloud, DevOps, and Information Security teams.

Mandatory Requirements

• Bachelor’s degree from a recognized academic institution.
• At least 5 years of experience in Information Security or Cybersecurity.
• At least 3 years of experience as an Application Security Architect or in a similar role.
• Proven experience leading Secure SDLC processes in an enterprise environment.
• Experience defining security requirements for applications and information systems.
• Experience providing secure development guidance and conducting security architecture reviews.
• Hands-on experience with SAST and DAST tools and secure code review processes.
• Strong knowledge of OWASP Top 10, CWE, and secure development principles.
• Experience writing application security policies, standards, procedures, and methodologies.
• Strong understanding of Web, API, Microservices, and Cloud architectures.
• Ability to lead initiatives, work independently, and manage multiple stakeholders.
• Excellent communication skills in both Hebrew and English.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, Computer Engineering, or a related field.
• Experience working in a large enterprise environment with more than 2,000 employees.
• Experience within an organization responsible for national critical infrastructure.