> Markdown version of [/jobs/ext/3672379-lead-application-security-architect-jones-lang-lasalle](https://www.wearedevelopers.com/jobs/ext/3672379-lead-application-security-architect-jones-lang-lasalle). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Application Security Architect - Jones Lang Lasalle

- **Company:** Jones Lang Lasalle
- **Location:** Barcelona, Spain
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Applications Architecture, Microsoft Azure, Cloud Computing, Cloud Engineering, Cyber Security, Continuous Integration, Identity and Access Management, Information Systems Security Architecture Professional, Key Management, OAuth, OpenID, Open Web Application Security, Public Key Infrastructure, Zero Trust Network Access, Systems Integration, Google Cloud, Large Language Models, Software Security, National Institute of Standards and Technology Cybersecurity Framework, Devsecops, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** October 10, 2026
- **Apply:** https://www.buscojobs.com.es/lead-application-security-architect-jones-lang-lasalle-en-barcelona-ID-374747415

## About the Role

Requisitos principalesComprehensive knowledge of application security methodologies (OWASP, SANS/CWE) and security architecture patterns
Experience designing security architectures for cloud-native environments (AWS, Azure, GCP), microservices, APIs, and containers
Proficiency in DevSecOps tooling (SAST, DAST, SCA, container image scanning, secrets management, CI/CD security)
Experience with NIST CSF, NIST SP ******, ISO *****, and zero-trust principles
Working knowledge of IAM, OAuth 2.0/OIDC, and app-layer auth controls
Understanding of cryptography, data protection, encryption, and PKI
Familiarity with threat modeling methods (STRIDE, PASTA)
Knowledge of OWASP GenAI, LLM Top 10, Security Exchange, Ai Exchange a plus
Bachelor's degree and 7+ years in information security focusing on application security or architecture
Relevant certifications (CSSLP, CISSP, AWS/Azure Security Specialty, OSCP) preferred
Strong communication with diverse stakeholders
Mentoring and leadership of junior engineers
Independent, proactive initiative on security initiatives
OWASP Top 10

## Description

OverviewAs a Senior Application Security Architect, you will bridge application security engineering with enterprise security architecture to safeguard JLL's complex real estate platforms.You will design and own security architectures for apps, cloud-native environments, and integrations, guiding secure SDLC practices and threat modeling.You'll act as a technical authority on secure design patterns, mentoring peers and aligning efforts across engineering, architecture, and business teams.You will drive secure digital transformation with a focus on reducing risk and enabling scalable, secure delivery.ResponsabilidadesDesign and maintain security architecture standards, policies, and patterns for enterprise apps, platforms, and cloud-native environmentsDevelop secure design patterns, ADRs, and architecture guidance across development teamsLead security architecture reviews against OWASP, NIST, and SANS frameworksIncorporate zero-trust and defense-in-depth strategies into application architectureDefine enterprise security requirements and produce metrics to measure complianceLead threat modeling sessions and provide remediation guidance for feature developmentChampion secure coding standards and developer security enablement programsAnalyze security requirements across technology domains to address risk and regulatory obligationsCommunicate security designs and risk assessments to technical and non-technical stakeholdersCoordinate security design reviews and cross-team alignment between security, engineering, and enterprise architectureContribute to the application security strategy roadmap and identify emerging threatsMentor junior security engineers and developers on secure design practicesLead cross-functional security initiatives and drive integration across development and architecture teamsSupport secure development training to build security competency across engineering organizationsRequisitos principalesComprehensive knowledge of application security methodologies (OWASP, SANS/CWE) and security architecture patternsExperience designing security architectures for cloud-native environments (AWS, Azure, GCP), microservices, APIs, and containersProficiency in DevSecOps tooling (SAST, DAST, SCA, container image scanning, secrets management, CI/CD security)Experience with NIST CSF, NIST SP ******, ISO *****, and zero-trust principlesWorking knowledge of IAM, OAuth 2.0/OIDC, and app-layer auth controlsUnderstanding of cryptography, data protection, encryption, and PKIFamiliarity with threat modeling methods (STRIDE, PASTA)Knowledge of OWASP GenAI, LLM Top 10, Security Exchange, Ai Exchange a plusBachelor's degree and 7+ years in information security focusing on application security or architectureRelevant certifications (CSSLP, CISSP, AWS/Azure Security Specialty, OSCP) preferredStrong communication with diverse stakeholdersMentoring and leadership of junior engineersIndependent, proactive initiative on security initiativesOWASP Top 10SANS/CWEsecure development frameworks