Application Security Architect

Help Shape Secure Digital Solutions in a Global Business

Our client is a leading international organization operating in a highly regulated industry, with a strong focus on digital transformation, innovation, and operational resilience. With technology at the core of its business, the company invests heavily in modern cloud platforms, secure software development, and cybersecurity to protect critical systems and sensitive data across a global environment.

As part of a collaborative international technology team, you will play a key role in embedding security into software development, influencing architecture decisions, and helping build secure applications from design through production.

Your Role

We are looking for an experienced Application Security Architect who combines strong technical expertise with a security-first mindset. In this role, you will partner with software engineering, infrastructure, and architecture teams to integrate security throughout the software development lifecycle (SDLC).

You will define application security standards, perform architecture and security reviews, guide development teams on secure design, and help strengthen the organization's overall application security posture across cloud, hybrid, and on-premises environments.

Key Responsibilities

• Design and maintain application and cloud security architecture standards;
• Embed security into the software development lifecycle (SDLC) using secure-by-design principles;
• Define and promote secure coding practices aligned with OWASP standards and industry best practices;
• Perform application security architecture reviews, threat modeling, and security assessments;
• Define security requirements for new applications, APIs, and cloud services;
• Support DevSecOps initiatives by integrating security into CI/CD pipelines;
• Collaborate with development teams to remediate security risks and vulnerabilities;
• Establish and maintain application security configurations and technical security controls;
• Promote network and application security best practices across engineering teams;
• Develop security dashboards and metrics to measure application security maturity and operational effectiveness;
• Monitor emerging threats and vulnerabilities and recommend appropriate security improvements;
• Support internal audits and regulatory compliance activities by driving remediation initiatives.

Required Experience

• 5-10 years of overall IT experience, including at least 3 years in Application Security, Security Architecture, or Secure Software Engineering;
• Experience designing security architectures for enterprise applications in cloud, hybrid, and on-premises environments;
• Proven background integrating security throughout the SDLC in Agile, DevSecOps, and SaaS environments;
• Experience performing threat modeling, architecture reviews, and defining security requirements;
• Strong collaboration experience with software development teams as a security advisor;
• Experience supporting audit remediation and implementing security-by-design principles in regulated environments.

Technical Skills

• Strong knowledge of application security architecture;
• Hands-on experience securing cloud-native applications;
• Solid understanding of OWASP frameworks and secure software development practices (SAMM, ASVS, Top 10, Proactive Controls, Testing Guide, Cheat Sheet Series);
• Experience integrating SAST, DAST, Software Composition Analysis (SCA), and dependency scanning into CI/CD pipelines;
• Strong understanding of authentication and identity standards, including OAuth2, OpenID Connect (OIDC), and SAML;
• Good knowledge of networking concepts and security technologies such as firewalls, proxies, WAFs, and network segmentation;
• Experience with enterprise Identity and Access Management (IAM) platforms;
• Scripting and automation skills (PowerShell or equivalent);
• Good understanding of Windows and cross-platform security administration.

Soft Skills

• Strong analytical and problem-solving abilities;
• Excellent communication and stakeholder management skills;
• Ability to influence technical teams and promote secure development practices;
• Proactive, detail-oriented, and solution-focused approach;
• Comfortable working independently as well as within international cross-functional teams.

Education & Certifications

• Master's degree in Computer Science, Cybersecurity, or a related technical discipline;
• Relevant security certifications are highly valued, such as:
• CISSP / ISSAP;
• CSSLP;
• CCSP;
• GIAC Application Security certifications;
• Azure, AWS, or Google Cloud security certifications.

What You'll Find

• Opportunity to influence security architecture across complex enterprise applications;
• Exposure to modern cloud technologies and secure software engineering practices;
• International, collaborative work environment with highly skilled technology teams;
• A role where security is embedded into innovation, not treated as an afterthought;
• Continuous learning and professional development within a global technology organization.