Position Details

Salary $150K – $224K USD / year

Type Not Specified

Experience mid

Exp. Years 8+ years

Education Bachelor's Degree in Arts/Sciences (BA/BS) or equivalent experience

Category Cybersecurity

About this role

Application Security Architect partnering with product and engineering to build secure software from design through delivery. Performs Secure by Design reviews, threat modeling, and CI/CD security guidance, including GenAI security considerations.

Key Responsibilities

Partner with engineering to build secure software from design through delivery
Lead threat modeling workshops
Conduct Secure by Design reviews
Triage findings from SAST/SCA/DAST and reduce false positives
Advise on CI/CD security and secure deployment patterns

Technical Overview

Security architecture across CI/CD, threat modeling, SAST/SCA/DAST, IaC, secrets, and AI/GenAI security; AWS cloud environments; automation and developer-focused guidance.

Ideal Candidate

The ideal candidate is a senior application security architect with 8+ years in security, expert in threat modeling and secure architecture reviews for modern web/API apps, and hands-on with CI/CD security and AI/GenAI security considerations, comfortable working across product, engineering, and leadership.

Must-Have Skills

Strong software development background with ability to read production code and advise on designThreat modeling and secure architecture review for web/API-based appsExpertise securing CI/CD and SDLC processesExperience with application security tooling (SASTSCADAST) and pipelinesWorking knowledge of AI/ML security risks for GenAI-enabled appsAbility to translate security requirements into developer-friendly guidance

Nice-to-Have Skills

Experience in AI/ML security risk managementExperience securing cloud-native architectures on AWS

Tools & Platforms

Amazon Web Services

Required Skills

Strong software development backgroundthreat modeling and secure architecture reviewexpertise securing CI/CD and SDLCexperience with SAST/SCA/DASTAI/ML security awarenesssecure use of third-party dependenciescollaboration with product/engineeringincident learnings

Hard Skills

Secure by Design reviewsThreat modelingSASTSCADASTIaC scanningCI/CD securityAI/ML securityGenAI security guidanceCloud (AWS) environments

Soft Skills

CollaborationConsultingInfluence without authorityDeveloper-focused communication

Industry & Role

Industry Insurance

Job Function Ensure secure software development across design, build, and deployment with secure-by-design practices.

Role Subtype Security Architect

Tech Domains Cybersecurity, Amazon Web Services

Keywords for Your Resume

application security architectsecure by design reviewsthreat modelingsecure by designSASTSCADASTIaC scanningCI/CD securitysecure deploymentthird-party dependenciesGenAI securityAI/ML securityAWSAmazon Web Servicescloud securitysecurity architecturedeveloper guidancesecurity tooling

Deal Breakers

Lack of 8+ years of IT/security experience, No experience with threat modeling or Secure by Design reviews, No AWS/cloud security experience

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile