Architect II – Application Security (DevSecOps Focus)

Lead the DevSecOps strategyby defining how application security controls, testing, and policy enforcement are embedded into CI/CD pipelines,including AI-assisted development workflows and agent-driven automation,to support rapid, secure software delivery.

Architect security-by-design patternsfor modern and AI assisted application development, including secure frameworks, reusable controls, and pipeline integrations that developers can adopt with minimal friction.

Partner with engineering and platform teamsto integrate security requirements into build, test, deployment workflows,and AI-enabled development workflows, ensuring emerging AI coding practices align with secure SDLC expectations andaligning security outcomes with business and delivery objectives.

Establish security governance and guardrails for AI-driven development trends, including LLM-assisted coding, autonomous DevOps agents, and AI-generated code, ensuring appropriate review, traceability, and risk management as these capabilities expand across the organization in coordination with AI governance and engineering teams.

Design and evolve application security telemetry and detection, ensuring meaningful signals flow into enterprise monitoring and response capabilities while minimizing noise and operational overhead.

Provide architectural leadership and mentorship, working with other Security Architects and cross functional teams to align AppSec initiatives with enterprise security and technology strategies.

Strong automation and pipeline integration skills, leveraging scripting, APIs, AI tooling and security platforms to streamline secure development and reduce manual processes.

Cloud-native application security expertise, including secure design patterns for AWS and SaaS platforms, identity-driven access controls, and secure service-to-service communication.

Influential communication and leadership skills, with experience guiding developers, mentoring engineers, and aligning technical security decisions with business priorities.

Security or architecture certifications, such as CISSP, ISSAP, CSSLP, CASP+, CASE or relevant GIAC certifications.

Proven experience delivering architecture artifacts, such as secure reference architectures, threat models, and developer-facing security standards that improve adoption and consistency.

Proven experience in CI/CD Pipeline Technologies,such as GitHub, JFrog Xray, Wiz, SonarCube, etc.