Application Security Architect with AI

Responsibilities

• Design and implement security architectures and controls for enterprise applications, APIs, microservices and cloud-native applications
• Gather business, technical and compliance requirements to design secure application solutions for new implementations, migrations and security improvements
• Define and improve application security capabilities, including authentication, authorization, API security, encryption, secrets management and secure configuration
• Conduct security architecture reviews, threat modeling, secure design assessments and application security risk analysis
• Develop application security reference architectures, security standards, secure design patterns and secure development guidelines
• Support Secure Software Development Lifecycle (SSDLC), secure-by-design principles and DevSecOps integration across engineering teams
• Evaluate and improve application security technologies and processes, including SAST, DAST, SCA, secrets scanning and vulnerability management
• Review application security vulnerabilities, identify architectural weaknesses and recommend appropriate remediation strategies
• Collaborate with development, DevOps, cloud, infrastructure, IAM, security operations and compliance teams to integrate security into application design and development
• Leverage AI-assisted tools and workflows to improve application security activities such as threat modeling, vulnerability assessment, secure code review, compliance analysis, security scripting and workflow automation

Languages

Required

• 5+ years of information security experience, with a focus on application security architecture, secure application design or application security engineering
• Knowledge of Secure SDLC, DevSecOps, CI/CD security and secure-by-design principles
• Working knowledge of at least one programming language such as Python, Java or C# (or JavaScript/TypeScript, Go), sufficient to review code and assess application security risks
• Competency in related security domains, including cloud security, IAM, network security, data protection and security operations
• Understanding of security architecture frameworks such as Zero Trust, NIST, ISO 27001 or OWASP guidelines

Nice to have

• Strong communication, collaboration and hands-on technical skills
• Experience with application security platforms such as Snyk, Checkmarx or Veracode (or SonarQube, Semgrep, GitHub
• Advanced Security, Burp Suite, OWASP ZAP)
• Background in application security architecture for cloud-native applications, microservices, containers and Kubernetes environments
• Skills in DevSecOps, CI/CD security automation, Infrastructure as Code scanning and policy-as-code solutions
• Capability to integrate application security findings with SIEM/SOAR, ticketing or vulnerability management platforms
• Proficiency in AI automation tools such as AI agents, Microsoft Copilot Studio, Azure OpenAI (or Amazon Bedrock, LangChain, Power Automate)

Other open roles here

• Senior/Lead Power BI Software EngineerRemote · Ukraine
• Delivery Manager (AI Native)Remote · Ukraine
• Senior Financial Manager (m/f/d)Remote · Germany
• Principal, Business ConsultingRemote · United States
• Senior Delivery Manager - .NET/JavaIndia · On-site · relocation