Application Security Architect

Job Summary

To support the expansion of a security organization, the full-time remote Application Security Architect will establish and evolve the Application Security program, collaborating closely with engineering and product teams to integrate security best practices.

Key responsibilities

• Establish and improve the strategy and tooling of the AppSec program
• Collaborate with engineers on design reviews, threat modeling, code reviews, and penetration testing
• Mentor junior members of the AppSec team and participate in security training initiatives

Required qualifications

• 10 years of experience in Application Security with a proven track record of building AppSec programs from scratch
• Deep understanding of common vulnerabilities such as XSS, CSRF, and SQL Injection
• Experience with technologies including C#, React, JavaScript, and REST APIs
• Active participation in OWASP, BSides, or open-source security projects
• Ability to effectively communicate security concepts to both technical and non-technical audiences