Application Security Architect

Role: Transition & Transformation (T&T) - Architect / SME

Location: Iselin NJ 08830 (Remote) 

Skills Required: T&T - Appsec, App PT, Threat Modeling, RBVM

About the Role: 

We are seeking a senior Transition & Transformation (T&T) Architect / SME for the T&T - Appsec, App PT, Threat Modeling, RBVM role within our Security Practice. The incumbent will be a senior expert who solutions requirements, designs architecture, defines HLD and LLD, collaborates with customers, and leads / executes implementation of security projects. The role involves performing due diligence on the current state to define strategy and roadmap, conducting healthchecks per OEM and industry best practices, and creating metrics reports and dashboards for executive and operational consumption.

Key Responsibilities:

· Solution requirements and design end-to-end architecture for customer engagements aligned to T&T - Appsec, App PT, Threat Modeling, RBVM scope.

· Define High Level Design (HLD) and Low Level Design (LLD) documents and review them with customers and stakeholders.

· Collaborate with customers, OEM partners, and internal teams to lead and execute implementation of solutions.

· Perform due diligence and current state assessment of customer environment to define transformation strategy and roadmap.

· Conduct healthchecks against OEM recommendations and industry best practices, and provide remediation guidance.

· Define and build metrics reports and dashboards to drive operational and executive visibility.

· Act as L3 SME for escalations, complex troubleshooting, and design optimization.

· Drive presales support, RFP responses, technical workshops, and Proof-of-Concept (PoC) initiatives where required.

· Contribute to competency building, knowledge management, and mentorship of junior engineers.

· Align solutions with applicable regulatory, compliance, and security frameworks.

Required Skills & Technical Competencies:

· Application Security (Appsec), Application Penetration Testing (App PT), Threat Modeling (STRIDE, PASTA), Risk Based Vulnerability Management (RBVM)

· SAST/DAST/IAST/SCA tooling (Checkmarx, Veracode, Fortify, Snyk, SonarQube), API security testing, secure SDLC and DevSecOps integration, vulnerability scanning, creation of scan profiles across frameworks and standards for compliance reporting, vulnerability prioritization and remediation guidance, current state assessment, healthchecks per OEM and industry best practices, Appsec metrics and dashboards, L3 SME, HLD, LLD

Qualifications:

·        Bachelor''s or Master''s degree in Computer Science, Information Technology, Engineering, or related field.

·        10-12 years of overall IT experience with significant focus in the relevant security domain.

·        Relevant OEM and industry certifications (e.g., CISSP, CISM, CCSP, CEH, OEM-specific certifications) preferred.

·        Prior experience in customer-facing T&T / consulting / architect roles.

Soft Skills:

·        Excellent communication, presentation, and stakeholder management skills.

·        Ability to lead workshops with CXO and technical audiences.

·        Strong analytical, problem-solving, and decision-making capability.

·        Self-driven, ownership-oriented, and collaborative team player.