Cyber Application Security Architect

Join the Cyber Architecture team of one of Israel’s leading financial organizations and take part in shaping enterprise-wide application security architecture. In this role, you’ll lead Secure SDLC initiatives, define security standards, and support strategic technology projects across application, cloud, and AI environments.

What You’ll Do:

• Define and lead the organization's Secure Software Development Lifecycle (SSDLC) strategy and framework.
• Review and approve security architectures for complex systems and strategic projects.
• Lead Architecture Governance processes and establish enterprise-wide security standards.
• Support technology projects across application, cloud, and AI environments.
• Perform Threat Modeling, identify security risks, and define mitigation solutions during the design phase.
• Collaborate closely with development managers, engineering teams, and cross-functional stakeholders.

Requirements:

• At least 5 years of experience leading Information Security Architecture in enterprise environments - Must.
• Extensive experience implementing Secure SDLC practices and integrating security tools (SAST, DAST, SCA, ASPM) into CI/CD pipelines - Must.
• Hands-on experience in Application Security, including identifying and mitigating application vulnerabilities - Must.
• Experience with Threat Modeling, Security Architecture Reviews, defining security requirements, and risk mitigation - Must.
• Experience in Cloud Security Architecture (AWS, Azure, or GCP) - Must.
• Deep understanding of Web, Mobile, API, Microservices, Cloud, and Container architectures - Must.
• Strong knowledge of security standards and methodologies such as OWASP Top 10, OWASP API Security Top 10, SAMM, and BSIMM.
• Strong leadership skills and ability to drive cross-functional initiatives.
• Excellent English communication skills, including technical documentation and professional discussions.
• Background in software development (Python, Java, Node.js, Go, or similar) - a significant advantage.
• Knowledge of AI/GenAI security risks, including LLMs and AI Agents - an advantage.
• Familiarity with security infrastructure and defensive security frameworks – an advantage.