Architect, Information Security - DevSecOps/Application Security - Remote

Molina Healthcare
United States
1 day ago
Apply on www.builtincolorado.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Compensation
$59,000 - $99,000
Working hours
Regular working hours

Tech stack

Application Programming Interfaces (APIs) Data Analysis Architectural Patterns Big Data Software as a Service Cloud Computing Databases Software Design Patterns DevOps Open Web Application Security Systems Development Life Cycle Salesforce.Com
+9 more
Secure Coding Software Engineering DevOps Tools - Open-source Software Security Generative AI Information Technology Devsecops Static Application Security Testing Dynamic Application Security Testing

Job description

Be an Early Applicant Remote Hiring Remotely in United States Mid level Remote Hiring Remotely in United States Mid level Provides application security architecture and governance within an AppSec Center of Excellence. Evaluates risks across the SDLC, conducts threat modeling and secure design reviews, defines secure architectural patterns, integrates SAST, DAST, and SCA tools into CI/CD pipelines, and supports vulnerability governance and risk mitigation. Partners with development, DevOps, and security teams to advance DevSecOps adoption, security awareness, and secure software delivery. The summary above was generated by AI, Provides application security architecture and governance support within the Application Security Center of Excellence (AppSec CoE). Responsible for identifying, assessing, and managing application and software supply chain risks, and defining secure-by-design patterns that enable development teams to deliver secure applications at scale. Partners with development teams, solution architects, DevOps teams, and security stakeholders to embed security controls across the Software Development Lifecycle (SDLC) and support a shift-left DevSecOps model

Essential Job Duties:

  • Partners with application teams to evaluate application security risks across the SDLC (design, build, test, deploy) Conducts or supports threat modeling, secure design reviews, and architecture reviews for applications, APIs, and cloud-native systems

  • Defines and promotes secure architectural patterns, guardrails, and reusable controls aligned with AppSec standards
  • Provides guidance on integration and usage of AppSec tools (e.g., SAST, DAST, SCA) within CI/CD pipelines
  • Supports enforcement of security requirements, standards, and control gating within SDLC processes
  • Identifies application security gaps and works with teams to define actionable risk mitigation strategies
  • Assists in tracking vulnerabilities, exceptions, and risk acceptances (RARE/SRA) in alignment with governance processes
  • Collaborates with Security Champions and development teams to improve application security maturity and adoption
  • Contributes to AppSec awareness, training, and enablement initiatives
  • Acts as a subject matter expert for application security and DevSecOps practices, Leads a team managing ADA and PWFA accommodation claims, ensuring accurate, timely, compliant claim adjudication and strong customer service. Responsibilities include coaching employees, managing performance and workloads, reviewing claim files and calls, identifying process improvements, administering concurrent disability and leave claims, mitigating risk, and communicating operational updates. The role requires disability or absence management expertise, sound judgment, knowledge of applicable regulations, and effective stakeholder collaboration.

Requirements

  • 3+ years experience in application security, software security, or DevSecOps
  • Knowledge of secure SDLC practices, threat modeling, and secure design principles
  • Experience with application security testing tools (SAST, DAST, SCA)
  • Understanding of OWASP Top 10, API security risks, and secure coding practices
  • Familiarity with CI/CD pipelines and DevOps tooling
  • Ability to translate technical risks into business context
  • Strong documentation and communication skills

Preferred Qualifications

  • CISSP, CISM, CCSP, or equivalent
  • Experience implementing OWASP SAMM or NIST SSDF-aligned programs
  • Experience leading AppSec or DevSecOps transformation initiatives

Benefits & conditions

Molina Healthcare offers a competitive benefits and compensation package. Molina Healthcare is an Equal Opportunity Employer (EOE) M/F/D/V, In-Office or Remote 2 Locations Expert/Leader Expert/Leader Big Data * Information Technology * Software * Analytics * Energy Own enterprise sales and account growth for energy-focused SaaS solutions. Build executive relationships, generate qualified pipeline, lead consultative sales pursuits, align solutions with strategic business objectives, develop presentations and ROI cases, negotiate and close opportunities, manage renewals and upsells, and maintain accurate Salesforce and sales database records. Top Skills: Generative AiMicrosoft AccessExcelMS OfficeMicrosoft OutlookMicrosoft PowerpointMicrosoft WordSaaSSalesforce MetLife

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.builtincolorado.com
Prepare application

Good distractions

Loading talks and stories from around this role…