Application Security Architect

Fynbosys Inc

New York, United States

18 days ago

Apply on www.dice.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Working hours

Regular working hours

Job source

www.dice.com

Tech stack

Application Programming Interfaces (APIs) Amazon Web Services Cloud Computing Security Cyber Security Continuous Integration Information Leak Prevention Identity and Access Management OAuth OpenID Open Web Application Security Systems Development Life Cycle Role-Based Access Control

+13 more

JSON Web Token Policy as Code Google Cloud Large Language Models Software Security Kubernetes Virtual Agents Terraform Docker Static Application Security Testing Vulnerability Analysis Microservices Dynamic Application Security Testing

Job description

Design and implement application security architecture across applications, APIs, and microservices.
Perform threat modeling, security reviews, and vulnerability assessments.
Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
Ensure secure coding practices aligned with OWASP Top 10 and API Security.
Secure cloud-native applications across AWS/Google Cloud Platform, Kubernetes, and containers.
Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency.
Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
Partner with engineering and security teams to drive security-by-design.

Requirements

12+ years of experience in Application Security / Security Architecture.
Strong knowledge of OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA.
Experience with AWS/Google Cloud Platform, Kubernetes, Docker, CI/CD, Terraform.
Strong understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
Experience with GenAI/LLM, RAG, Agentic AI, or AI Security.
Knowledge of LangChain/LangGraph, vector databases, and AI security controls is a plus.
Strong communication and stakeholder management skills.