Overview
On Site
Contract - W2
Skills
Management
Leadership
Enterprise Software
Stacks Blockchain
Octave
Authorization
Continuous Integration
Continuous Delivery
Roadmaps
Generative Artificial Intelligence (AI)
Security Analysis
Documentation
Training
Security Awareness
Design Review
Encryption
Computer Science
Information Security
Security Architecture
Threat Modeling
Cloud Computing
Microsoft Azure
Google Cloud Platform
Google Cloud
Software Security
SCA
Security QA
Burp Suite
Proxies
Software Development
DevSecOps
OWASP
SANS
Authentication
Multi-factor Authentication
SSO
OAuth
SAML
OIDC
Security Controls
PCI DSS
Sarbanes-Oxley
Microservices
API
Programming Languages
Java
Python
JavaScript
Code Review
SPA
Communication
CISSP
Amazon Web Services
DICE
Job Details
Overview
The Senior Application Security Architect is responsible for designing, implementing, and overseeing enterprise-wide application security architecture and standards. This role focuses on establishing security frameworks, conducting architecture reviews, developing security baselines, and leading strategic security initiatives that have broad impact across the organization. The position requires a blend of technical expertise, architectural thinking, and leadership to embed security throughout the software development lifecycle.
Job Responsibilities:
#LI-WB
#Dice
The Senior Application Security Architect is responsible for designing, implementing, and overseeing enterprise-wide application security architecture and standards. This role focuses on establishing security frameworks, conducting architecture reviews, developing security baselines, and leading strategic security initiatives that have broad impact across the organization. The position requires a blend of technical expertise, architectural thinking, and leadership to embed security throughout the software development lifecycle.
Job Responsibilities:
- Design and establish enterprise application security architecture frameworks and reference models aligned with business objectives and risk tolerance
- Lead architecture reviews of applications and systems to identify security gaps and recommend appropriate controls
- Develop and maintain security baselines, standards, and patterns for different technology stacks (web, mobile, API, microservices) and deployment models
- Create and evolve threat modeling methodologies (STRIDE, PASTA, OCTAVE) and facilitate threat modeling sessions with development teams
- Define secure coding standards and security requirements for different application types based on data classification and risk profile
- Architect security solutions for authentication, authorization, encryption, and secure communication channels
- Establish security guardrails for cloud-native applications, serverless architectures, and infrastructure-as-code implementations
- Design and implement API security strategies including OAuth/OIDC flows, API gateways, and rate limiting
- Integrate security architecture principles into CI/CD pipelines to support DevSecOps initiatives
- Evaluate and recommend security tools and technologies for the enterprise security tech stack
- Develop security architecture roadmaps and guide implementation of security capabilities
- Partner with development teams to design secure solutions that balance security requirements with business needs
- Lead strategic security initiatives with enterprise-wide impact
- Leverage GenAI technologies to enhance security architecture reviews and automate security analysis
- Maintain documentation of security architecture decisions, patterns, and reference implementations
- Develop and deliver security architecture training to raise security awareness among developers and architects
- Stay current with emerging security threats, technologies, and architectural approaches
- Perform security design reviews for new applications and major changes to existing applications
- Architect secure data handling practices including encryption at rest and in transit
- Bachelor's degree in Computer Science, Information Security, or related technical field required
- 5+ years of experience in application security, with at least 2 years in security architecture roles
- Deep knowledge of secure design principles, threat modeling methodologies, and security patterns
- Experience designing security controls for cloud environments (AWS, Azure, Google Cloud Platform)
- Proficiency in evaluating and implementing application security tools (SAST, DAST, IAST, SCA)
- Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, and other proxy tools
- Experience with secure software development practices and DevSecOps implementation
- Strong understanding of OWASP Top 10, SANS CWE, and other security standards
- Knowledge of secure authentication mechanisms (MFA, SSO, OAuth 2.0, SAML, OIDC)
- Experience with secure API design and implementation of API security controls
- Knowledge of regulatory requirements (PCI-DSS, GDPR, SOX, etc.) and their architectural implications
- Experience with containerization, microservices, and API security
- Proficiency in one or more programming languages (Java, Python, JavaScript preferred)
- Experience with secure code review techniques and identifying common vulnerability patterns
- Knowledge of cryptographic protocols and implementations
- Experience with security requirements for modern application architectures (SPA, serverless, etc.)
- Excellent communication skills with ability to translate complex security concepts to technical and non-technical audiences
- Experience leading cross-functional security initiatives and influencing stakeholders
- Certifications such as CSSLP, CISSP, AWS Security Specialty are highly desirable
#LI-WB
#Dice
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.