cloud security architect

Renesas

<div>Job Description 
About the role:
This role is responsible for making our software secure by design and keeping it secure throughout its lifecycle &mdash; from architecture and development to deployment and operations. The Architect will define security standards, embed security into engineering workflows, and ensure our SaaS platform meets enterprise-grade security and compliance expectations.
 A day in the life of our Cloud Security Architect:<ul><li>
Define and maintain secure architecture patterns for cloud-native SaaS systems</li><li>
Review and approve system designs for security risks</li><li>
Lead threat modeling for new features and platform components</li><li>
Design secure multi-tenant isolation models</li><li>
Architect secure API frameworks and integration patterns</li><li>
Ensure tenant data isolation and encryption strategies</li><li>
Continuously improve Secure SDLC practices</li><li>
Define secure coding standards and guardrails</li><li>
Architect secure cloud environments</li><li>
Define IAM, least-privilege access models, and service-to-service authentication</li><li>
Participate in security audits and customer security reviews</li><li>
Lead security incident root-cause analysis for application-layer incidents</li><li>
Improve detection and monitoring for application-level threats</li><li>
Collaborate with SRE to ensure security does not compromise reliability</li></ul>
Who We&rsquo;re Looking For:<ul><li>
8+ years in software engineering, security engineering, or cloud architecture</li><li>
Strong expertise in cloud-native architecture (microservices, containers, Kubernetes)</li><li>
Deep understanding of application security (OWASP Top 10, secure coding)</li><li>
Strong knowledge of IAM, authentication protocols (OAuth2, OIDC, SAML)</li><li>
Experience designing secure multi-tenant SaaS systems</li><li>
Hands-on experience with one major cloud provider (AWS preferred)</li></ul>
Preferred Qualifications:<ul><li>
Experience in enterprise SaaS environments</li><li>
Experience with regulated industries (FedRAMP, CMMC)</li><li>
Knowledge of tenant-based encryption models</li><li>
Experience implementing zero-trust architecture</li><li>
Background in vulnerability disclosure or bug bounty programs</li></ul>
The salary range for this role is $240,000 - $260,000. Actual compensation packages within this range are based on a wide array of factors unique to each candidate and role requirements, including but not limited to skill set, years and depth of experience, certifications, and specific location. 
Additional Information<div></div> 
Renesas is an embedded semiconductor solution provider driven by its Purpose &lsquo;To Make Our Lives Easier.&rsquo; As the industry&rsquo;s leading expert in embedded processing with unmatched quality and system-level know-how, we have evolved to provide scalable and comprehensive semiconductor solutions for automotive, industrial, infrastructure, and IoT industries based on the broadest product portfolio, including High Performance Computing, Embedded Processing, Analog &amp; Connectivity, and Power. 
 
With a diverse team of over 22,000 professionals in more than 30 countries, we continue to expand our boundaries to offer enhanced user experiences through digitalization and usher into a new era of innovation. We design and develop sustainable, power-efficient solutions today that help people and communities thrive tomorrow, &lsquo;To Make Our Lives Easier.&rsquo; 
 
At Renesas, you can:<ul><li>
Launch and advance your career in technical and business roles across four Product Groups and various corporate functions. You will have the opportunities to explore our hardware and software capabilities and try new things.</li><li>
Make a real impact by developing innovative products and solutions to meet our global customers' evolving needs and help make people&rsquo;s lives easier, safe and secure.</li><li>
Maximize your performance and wellbeing in our flexible and inclusive work environment. Our people-first culture and global support system, including the remote work option and Employee Resource Groups, will help you excel from the first day.</li></ul>
Are you ready to own your success and make your mark?
Join Renesas. Shape Your Future with Us.
Renesas Electronics is an equal opportunity and affirmative action employer, committed to celebrating diversity and fostering a work environment free of discrimination on the basis of sex, race, religion, national origin, gender, gender identity, gender expression, age, sexual orientation, military status, veteran status, or any other basis protected by federal, state or local law. For more information, please read our Diversity &amp; Inclusion Statement.
Renesas Electronics deals with dual-use technology that is subject to U.S. export controls regulations. Under these regulations it may be necessary for Renesas to obtain U.S. government export license prior to release of technology to certain persons. The decision whether or not to file or pursue an export license application is at the sole discretion of Renesas.
We have adopted a hybrid model that gives employees the ability to work remotely two days a week while ensuring that we come together as a team in the office the rest of the time. The designated in-office days are Tuesday through Thursday for innovation, collaboration and continuous learning.</div>

Cloud Security Architect

Vanguard

<div><div>Vanguard is seeking a Senior Cloud Security Architect &ndash; IAM to drive the design and evolution of cloud identity and access management across AWS, Azure, and GCP. This is a hands-on senior individual contributor role with broad impact across cloud engineering, cybersecurity, and platform teams. The role focuses on enabling secure-by-default cloud adoption, strengthening privileged access, improving developer experience, and supporting emerging use cases, including AI, within a highly regulated environment.</div><div>
Global Risk and Security (GR&amp;S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions. 
Within GR&amp;S, the Enterprise Security and Fraud (ES&amp;F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.
Our crew are our greatest resource &ndash; by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.
Core Responsibilities<ul><li>
Define and evolve cloud IAM architecture across authentication, authorization, federation, and identity governance.</li><li>
Own and drive the enterprise cloud IAM strategy, including modern authentication, non‑human identities, and emerging AI use cases.</li><li>
Lead cloud security architecture reviews and influence engineering roadmaps toward secure, scalable outcomes.</li><li>
Design and implement cloud-native IAM patterns, including least privilege, policy‑as‑code, workload identity, conditional access, and service‑to‑service authentication.</li><li>
Establish and enforce IAM guardrails for Infrastructure as Code (IaC) using automated policy controls.</li><li>
Streamline secure access workflows through standardized roles, self‑service access, and efficient onboarding.</li><li>
Monitor and reduce identity-related risk (excessive permissions, misconfigurations, toxic access paths) and translate insights into architectural improvements.</li><li>
Define and align policy-driven privileged access controls across cloud platforms, applications, and CI/CD pipelines.</li><li>
Partner with cloud engineering, DevSecOps, security, and risk/compliance teams to ensure alignment with enterprise security and regulatory standards.</li></ul>
Qualifications<ul><li>
8+ years of experience in IAM, Cloud Security, Security Architecture, or related enterprise IT roles, including 3+ years as a technology/security architect</li><li>
Bachelor&rsquo;s degree or equivalent combination of education and experience</li><li>
Experience leading technical initiatives (people or matrix leadership)</li><li>
Multi‑cloud IAM expertise (AWS, Azure, GCP, OCI)</li><li>
Background in regulated environments (financial services preferred) with exposure to SOX, SOC, GDPR, DORA</li><li>
Certifications preferred: CISSP (preferred), GSEC, CISM, CCSP, and/or cloud provider certifications</li></ul>
Special Factors
Sponsorship
Vanguard is offering visa sponsorship for this position.
About Vanguard
At Vanguard, we don't just have a mission&mdash;we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</div></div>

Senior Cloud Security Architect, IAM Cloud

COZMALABS

We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.Experience Requirements<ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul>Key Responsibilities<ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul>Required Technical Expertise<ul><li>Deep technical understanding and hands on of:</li></ul>Cloud &amp; Security Platforms<ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul>Infrastructure &amp; Systems Security<ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul>DevSecOps &amp; Automation<ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul>Certifications (Required / Strongly Preferred)<ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul>EducationBachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).Work Location: In person

Cybersecurity

<div>Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Senior Manager
Job Description &amp; Summary
As Cloud Architect, you will define and govern the cloud architecture for the digital banking platform, ensuring secure, scalable, and resilient solutions across both AWS and Azure. You will work closely with engineering, DevOps, security, and data teams to deliver cloud infrastructure and services that support rapid delivery, operational excellence, and regulatory compliance.
Key Responsibilities:
Stakeholder Management &amp; Technical Leadership
<ul><li>Act as the primary technical liaison, facilitating regular steering calls between client stakeholders and multiple service providers.
</li></ul><ul><li>Translate complex technical questions and design proposals from service providers into clear, actionable items for management-level review.
</li></ul><ul><li>Drive the decision-making process by discussing technical options with relevant client stakeholders, securing approvals, and ensuring alignment.
</li></ul><ul><li>Communicate decisions and provide clear, decisive direction back to service providers to guide project execution and technical implementation.
</li></ul>Cloud &amp; IoT Operations (AWS)
<ul><li>Manage the day-to-day operations of the production IoT infrastructure hosted on AWS, ensuring high availability, performance, and reliability.
</li></ul><ul><li>Lead the incident management process, including timely response, troubleshooting, and resolution of platform issues.
</li></ul><ul><li>Proactively monitor platform health, performance metrics, and system alerts to prevent service disruptions.
</li></ul>Governance, Cost Optimization &amp; Security
<ul><li>Implement and enforce cloud governance policies, including proper resource tagging, identifying and decommissioning unused services, and ensuring best practices are followed.
</li></ul><ul><li>Actively monitor, analyze, and optimize cloud costs, leading discussions in FinOps meetings to drive financial efficiency.
</li></ul><ul><li>Oversee cloud security by monitoring security findings, ensuring compliance with security controls, and working continuously to improve the platform's security posture.
</li></ul><ul><li>Generate and present regular reports on infrastructure costs, security status, and operational performance to a variety of stakeholders.
</li></ul>Required Skills:
<ul><li>12+ years in cloud architecture/engineering, with significant experience in regulated environments.
</li></ul>&bull; Deep expertise in both AWS and Azure cloud platforms , including core services (compute, storage, networking, IAM, security).
<ul><li>Strong knowledge of containerization (Docker, Kubernetes/EKS/AKS), automation (Terraform, ARM, CloudFormation), and CI/CD.
</li></ul><ul><li>Experience with cloud security, monitoring, and compliance frameworks.
</li></ul><ul><li>Proven ability to design for scalability, resilience, and operational efficiency.
</li></ul>Preferred/Bonus Skills:
<ul><li>Certifications: AWS/Azure Architect, Security, or similar.
</li></ul><ul><li>Experience with hybrid/multi-cloud environments and cloud migration.
</li></ul><ul><li>Familiarity with event-driven architectures, API management, and observability tooling
</li></ul>Why Join Us?
<ul><li>Be part of a flagship digital banking transformation delivered from a leading regional engineering center.
</li></ul><ul><li>Work with cutting-edge technologies and modern delivery practices.
</li></ul><ul><li>Collaborate with a diverse, high-performing team in a dynamic, growth-focused environment.
</li></ul><ul><li>Competitive compensation and benefits.
</li></ul>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Amazon Web Services (AWS), Analytical Thinking, Architectural Engineering, Brainstorm Facilitation, Business Impact Analysis (BIA), Business Process Modeling, Business Requirements Analysis, Business Systems, Business Value Analysis, Cloud Strategy, Coaching and Feedback, Communication, Competitive Advantage, Competitive Analysis, Conducting Research, Creativity, Embracing Change, Emotional Regulation, Empathy, Enterprise Architecture, Enterprise Integration, Evidence-Based Practice (EBP) {+ 49 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date</div>

ETIC, IOT Cloud Architect- Senior Manager

Shaw Systems Associates

<div>Overview

The Information Security Architect is responsible for designing secure, compliant, and scalable architectures that enable the organization to safely adopt Microsoft 365 Copilot, large language models (LLMs), AI agents, and intelligent automation. This role blends deep expertise in Microsoft Purview, cloud security, responsible AI, and enterprise productivity tooling.

A core mandate includes implementing strong data ring‑fencing controls to ensure sensitive information remains within trusted network boundaries, while also driving measurable business value from Copilot in Microsoft 365 (M365) through secure enablement, workflow optimization, and governed adoption while limiting access to other AI resources from the company network not approved by the Information Security Office.

This individual will lead the company&rsquo;s M365 CoPilot Purview implementation setting many of the foundational pre-requisites required for a successful and secure AI ecosphere. 


Key Responsibilities

AI, LLM, Copilot, and Agent Security Architecture
<ul>
<li>Design secure architectures for LLMs, Microsoft 365 Copilot, generative AI systems, RAG pipelines, and autonomous AI agents.</li>
<li>Define guardrails for Copilot and AI agents, including identity boundaries, access controls, and operational constraints.</li>
<li>Establish governance for prompt security, model input/output filtering, and safe‑use patterns across the enterprise.</li>
<li>Architect secure integration patterns ensuring all AI systems operate strictly within approved network zones and data boundaries.</li>
</ul>
Data Ring‑Fencing &amp; Boundary Protection
<ul>
<li>Implement ring‑fencing strategies to prevent sensitive data from leaving the company&rsquo;s network or being accessed by unauthorized AI systems.</li>
<li>Design and enforce network segmentation, private endpoints, and isolation zones for AI workloads.</li>
<li>Ensure Copilot, LLMs, vector stores, and AI agents only access data through approved, monitored, and policy‑controlled channels.</li>
<li>Build automated controls that block data exfiltration, including DLP, egress filtering, and Purview‑driven policy enforcement.</li>
</ul>
Business Value Realization with Microsoft 365 Copilot
<ul>
<li>Lead secure enterprise adoption of Microsoft 365 Copilot, ensuring alignment with data governance and security policies.</li>
<li>Identify high‑value Copilot use cases that drive measurable productivity, efficiency, and decision‑making improvements.</li>
<li>Develop Copilot frameworks, usage patterns, and success metrics demonstrating</li>
<li>Ensure Copilot interactions respect sensitivity labels, retention policies, and Purview‑driven governance.</li>
</ul>
AI‑Driven Automation &amp; Enterprise Productivity
<ul>
<li>Architect secure AI agent frameworks that automate business processes, knowledge retrieval, and decision support.</li>
<li>Evaluate and implement AI‑powered copilots, workflow automation, and intelligent assistants across departments.</li>
<li>Develop standards for human‑in‑the‑loop oversight, escalation paths, and monitoring of autonomous agent behavior.</li>
</ul>
Microsoft Purview Strategy &amp; Data Governance
<ul>
<li>Lead the enterprise strategy for Microsoft Purview, ensuring data classification, lineage, and sensitivity labeling support AI and Copilot use cases.</li>
<li>Implement automated governance workflows that feed LLMs, Copilot, and AI agents only the data they are authorized to access.</li>
</ul>
Information Security &amp; Compliance
<ul>
<li>Define and enforce security baselines for AI workloads, including encryption, identity, network segmentation, and model access.</li>
<li>Ensure compliance with emerging AI regulations, including transparency, auditability, and model risk management requirements.</li>
<li>Conduct threat modeling for Copilot, LLMs, and AI agents, including prompt injection, data leakage, model manipulation, and supply‑chain risks.</li>
</ul>
Cross‑Functional Leadership
<ul>
<li>Serve as the enterprise SME for secure AI and Copilot adoption, guiding engineering, data science, legal, and compliance teams.</li>
<li>Translate complex AI security concepts into actionable guidance for business leaders and technical teams.</li>
<li>Lead architecture reviews for AI‑enabled applications, copilots, and agent‑based automation initiatives.</li>
</ul>
Monitoring, Observability &amp; Continuous Improvement
<ul>
<li>Implement monitoring for Copilot usage, LLM interactions, agent actions, and data access patterns.</li>
<li>Automate governance and compliance checks using Purview workflows, Azure Policy, and CI/CD pipelines.</li>
<li>Continuously evaluate emerging AI threats, model vulnerabilities, and best practices for responsible AI.</li>
</ul>
Required Qualifications
<ul>
<li>7+ years in information security, cloud architecture, or data governance.</li>
<li>2+ years of hands-on AI experience in an implementation and/or architecture role.</li>
<li>Strong experience and working knowledge of Microsoft Purview, Azure security services, and cloud governance frameworks with a proven track record of implementations.</li>
<li>Strong understanding of LLMs, generative AI, Retrieval-Augmented Generation (RAG) architectures, AI agent frameworks, and Microsoft 365 Copilot.</li>
<li>Proven experience driving business value through Microsoft 365 Copilot, including workflow optimization and measurable productivity gains.</li>
<li>Expertise in identity and access management, data protection, and secure cloud architecture.</li>
<li>Experience implementing ring‑fencing, network segmentation, and data‑boundary controls in Azure or AWS.</li>
<li>Excellent communication faculties, capable of demystifying complex technical paradigms to a varied audience, with both technical and non-technical stakeholders.</li>
</ul>
Preferred Qualifications
<ul>
<li>Certifications such as Azure Solutions Architect, Azure Security Engineer, CISSP, CCSP, or equivalent.</li>
<li>Experience with enterprise AI platforms, vector databases, and Machine Learning Operations (MLOps) pipelines.</li>
<li>Knowledge of AI observability, model risk management, and responsible AI frameworks.</li>
<li>Background in data architecture, automation engineering, or enterprise integration.</li>
</ul>
Core Competencies
<ul>
<li>Strategic thinker with the ability to influence across technical and non‑technical teams.</li>
<li>Strong communication skills with the ability to simplify complex AI and Copilot concepts.</li>
<li>Ability to work effectively with managers, technical leads, and technical staff to understand and deliver value added solutions.</li>
<li>Passion for secure, ethical, and innovative use of AI to transform business operations.</li></ul></div>

Information Security AI Architect

Altec Industries

<div>Responsibilities
The Application Security Architect partners with software development, platform, cybersecurity, and cloud engineering teams to embed security throughout the modern software development lifecycle (SDLC). This role focuses on secure-by-design practices, DevSecOps strategy, roadmap and enablement, and risk-based vulnerability management across internally developed, third-party, SaaS, and cloud-native applications. The AppSec Architect serves as the strategic owner of the Application Security Roadmap, defines target-state AppSec maturity aligned to business growth, and prioritizes AppSec investments and tooling rationalization. The role serves as a trusted advisor to development teams and the key contributor to the organization&rsquo;s overall Secure Software Development Program.
Key Responsibilities
Secure SDLC &amp; DevSecOps
<ul><li>Embed application security controls into CI/CD pipelines, including automated SAST, DAST, IAST, SCA, secrets detection, and IaC scanning.
</li><li>Establish standardized security controls across platforms.
</li><li>Design exceptions and compensating controls.
</li><li>Partner with development teams to implement shift-left security while maintaining delivery velocity.
</li><li>Define and maintain secure coding standards, security design patterns, and reference architectures.
</li><li>Participate in architecture and design reviews, including threat modeling for new applications and major changes.
</li><li>Perform research and development (R&amp;D) into existing processes and tooling opportunities
</li></ul>Application &amp; Cloud Security Assessment
<ul><li>Identify and assess security risks in web, mobile, API, SaaS, and cloud-native applications developed internally or by third parties.
</li><li>Perform or coordinate:
<ul><li>Source code reviews (manual and automated)
</li><li>Application vulnerability assessments and penetration tests
</li><li>API and microservices security testing &amp; analysis
</li><li>Cloud configuration and IaC security reviews
</li></ul></li><li>Validate findings, reduce false positives, and prioritize remediation based on business risk.
</li><li>Establish reusable security architecture patterns for cloud-native and distributed systems.
</li></ul>Vulnerability &amp; Risk Management
<ul><li>Manage application security findings through a centralized vulnerability or risk management platform.
</li><li>Work with development teams to define practical, risk-based remediation guidance.
</li><li>Track remediation progress, verify fixes, and support exception/risk acceptance processes.
</li><li>Contribute to application security metrics, KPIs, and executive-level reporting.
</li><li>Translate technical debt and vulnerabilities into business risk and exposure.
</li></ul>Open Source &amp; Supply Chain Security
<ul><li>Assess and manage risks related to open-source dependencies, libraries, and third-party components.
</li><li>Support Software Composition Analysis (SCA) and software supply chain security initiatives (e.g., dependency hygiene, SBOMs).
</li><li>Evaluate security posture of third-party applications and vendors in collaboration with risk management team.
</li><li>Verify compliance with third-party component licensing models
</li></ul>Software Compliance
<ul><li>Lead software compliance activities related to application vulnerabilities, data exposure, or insecure design.
</li><li>Support application-related forensic analysis and root-cause investigations.
</li><li>Assist with compliance and assurance activities related to secure development (e.g., NIST, ISO, SOC, internal audits).
</li></ul>Enablement &amp; Education
<ul><li>Develop and deliver application security training for developers and cybersecurity team
</li><li>Provide hands-on guidance and documentation to improve developer security maturity.
</li><li>Act as a security champion advocate, helping teams make informed security decisions.
</li></ul>Required Education, Experience, and Skills
<ul><li>High School Diploma/GED Required
</li><li>Bachelor&rsquo;s Degree (Technical Degree Preferred) and 6 Years Relevant Experience OR 8 Years Relevant Experience
</li><li>12+ years of combined experience across software engineering, platform/cloud engineering, application security, &amp; DevSecOps / SRE with strong cybersecurity ownership preferred
<ul><li>5+ years in hands-on software engineering or platform/cloud engineering preferred
</li><li>7+ years in application security, DevSecOps, or secure architecture preferred
</li></ul></li><li>Strong understanding of modern SDLCs, Agile, and CI/CD practices.
</li><li>Hands-on experience with at least one major programming language (e.g., Java, C#, Python, JavaScript).
</li><li>Practical knowledge of:
<ul><li>Web, mobile, and API security
</li><li>Authentication and authorization models (OAuth2, OIDC, JWT, SAML)
</li><li>OWASP Top 10 and API Top 10
</li></ul></li><li>Familiarity with cloud platforms (AWS, Azure, and/or OCI) and cloud-native services.
</li><li>Working knowledge of networking fundamentals, encryption, and secure communications.
</li><li>Excellent written and verbal communication skills, with the ability to translate security risk into business impact.
</li></ul>Preferred / Beneficial Qualifications
<ul><li>Experience with application security tools such as SAST, DAST, IAST, SCA, secrets scanning, or IaC security platforms.
</li><li>Experience securing containers, Docker, and serverless workloads.
</li><li>Knowledge of Infrastructure as Code frameworks (e.g., Terraform, CloudFormation).
</li><li>Familiarity with threat modeling frameworks (e.g., STRIDE).
</li><li>Security or development certifications such as:
<ul><li>CSSLP, CISSP, GWAPT, GWEB, OSWE, or equivalent
</li><li>Cloud security certifications (AWS, Azure, or GCP)
</li></ul></li></ul>Behavioral &amp; Professional Expectations
<ul><li>Strong collaboration skills; ability to influence without authority.
</li><li>Comfortable balancing security risk with business and delivery priorities.
</li><li>Highly organized, detail-oriented, and self-directed.
</li><li>Customer-service mindset toward internal development teams.
</li><li>Ability to remain effective in fast-paced, evolving technical environments.
</li><li>Commitment to confidentiality, ethical conduct, and continuous improvement.
</li></ul>Additional Information
<ul><li>Travel: 0&ndash;25% (as needed)
</li><li>Work hours may occasionally include non-standard hours to support critical releases or incidents.
</li><li>Job level and scope may be adjusted based on experience and qualifications.
</li></ul>Experience Level Adjustmnt
Should the selected candidate meet the qualifications of a more experienced level in the career path, the job level may be adjusted.
Benefits
Altec offers a competitive salary that rewards performance and dedication, along with a comprehensive benefits package that includes:<ul><li>
Medical, Dental, Vision and Prescription Drug Program</li><li>
Retirement 401(k) Traditional or Roth Program Options with Company Match</li><li>
Vacation and Holidays</li><li>
Parental Leave</li><li>
Short Term and Long Term Disability Leave</li><li>
Flexible Spending Accounts</li><li>
Tuition Assistance Program</li><li>
Employee Assistance and Mental Health/Substance Abuse Program</li><li>
Life Insurance, Accidental Death and Dismemberment Insurance</li><li>
Supplemental Insurance including Hospital Indemnity, Critical Illness and Accident Insurance</li><li>
Additional Wellness Programs and Rewards Available</li></ul>
Why Join Altec?
If you're considering a career with Altec, there's never been a better time to join us! Our company was founded on values that place the customer first and prioritize our people as our greatest strength. Over the years, those values and our talented associates have helped us to earn the trust and confidence of customers worldwide. Today, Altec is an innovative, financially sound company that sets the standard of excellence in design, manufacturing and service &mdash; and that's why we're the ideal place for you to grow your career.
Founded in 1929, Altec is a privately held company headquartered in Birmingham, Alabama. Altec specializes in the manufacture, sale and service of aerial devices, digger derricks, cranes and specialty equipment for the electric utility, telecommunications, tree care, construction, and light and signs markets. We help our customers dig deeper and reach higher in more than 100 countries around the world.
EEO Statement
Altec Industries, Inc. and its affiliates are equal opportunity employers and maintain affirmative action plans to recruit, retain, develop, and promote qualified individuals without unlawful consideration of race, gender, color, religion, sexual orientation, gender identity, national origin, age, disability, citizenship status, veteran status, or any other characteristic protected by federal, state or local law. Altec strives to maintain a work environment free from unlawful discrimination and harassment, where associates are treated with respect and dignity.</div>

Application Security Architect

Search 10000+ Cloud security architect jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 cloud security architect jobs Near Me

Cloud Security Architect

Senior Cloud Security Architect, IAM Cloud

Cybersecurity

ETIC, IOT Cloud Architect- Senior Manager

Information Security AI Architect

Information Security AI Architect

Application Security Architect