security architect

<div>AI, Security Architect

At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.
Overview

BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.

Primary Responsibilities
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
Required Qualifications
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
Preferred Qualifications
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

AI Security Architect

American Recruiting & Consulting Group

<div><h2 class="jobSectionHeader">AI Security Architect (LLM Security / Guardrails / Enterprise Architecture)</h2>
100% REMOTE! 
W2 Contract Only | No C2C / No 1099 / No Third-Party Vendors 
Must have permanent US work authorization or USA Citizenship (no sponsorship now or in the future)<h3 class="jobSectionHeader">
SUMMARY STATEMENT</h3>
ARC Group is seeking an experienced AI Security Architect for a direct client in the healthcare insurance domain. This role is responsible for designing and implementing enterprise AI security architecture, with a strong focus on securing locally hosted AI/LLM models, defining and enforcing AI guardrails, and establishing security standards, blueprints, and governance frameworks across AI-driven platforms.
This is a true Architect-level role requiring hands-on experience in AI security design, threat modeling, and control implementation across the full AI lifecycle.<h3 class="jobSectionHeader">
ESSENTIAL RESPONSIBILITIES</h3><ul><li>
Design and implement end-to-end AI security architecture for locally hosted AI/LLM platforms.</li><li>
Define and enforce AI guardrails, including prompt injection prevention, input/output filtering, and response validation controls.</li><li>
Develop and maintain enterprise security blueprints, architecture standards, and design patterns for AI/ML platforms.</li><li>
Perform AI threat modeling and identify risks such as model misuse, adversarial inputs, and data leakage.</li><li>
Implement security controls across the AI lifecycle, including data ingestion, model training, inference, and output handling.</li><li>
Establish and monitor security metrics and controls to evaluate effectiveness of AI security architecture.</li><li>
Collaborate with engineering, data science, and infrastructure teams to ensure secure AI platform design and deployment.</li><li>
Participate in architecture governance, design reviews, and technology evaluations, including build vs. buy decisions.</li><li>
Evaluate and recommend AI security tools, frameworks, and solutions aligned to enterprise standards.</li><li>
Maintain architecture documentation, security standards, and operational procedures.</li><li>
Provide leadership on emerging AI security threats, vulnerabilities, and industry trends.</li></ul><h3 class="jobSectionHeader">
REQUIRED EXPERIENCE</h3><ul><li>
10+ years of overall cybersecurity experience with strong focus on architecture and design.</li><li>
2+ years of CURRENT hands-on experience in AI security architecture (MANDATORY).</li><li>
Proven experience securing locally hosted / on-prem AI or LLM models.</li><li>
Hands-on experience implementing AI guardrails, including:<ul><li>
Prompt injection prevention</li><li>
Input/output filtering</li><li>
Response validation and policy enforcement</li></ul></li><li>
Strong experience designing end-to-end security architecture for AI/ML platforms.</li><li>
Deep understanding of AI/LLM threat landscape (prompt injection, data leakage, model abuse).</li><li>
Experience with enterprise security architecture frameworks and governance models.</li><li>
Hands-on experience with cloud security (AWS and/or Azure).</li><li>
Strong background in Identity and Access Management (IAM), RBAC, and secure access controls.</li></ul><h3 class="jobSectionHeader">
REQUIRED CERTIFICATIONS</h3><ul><li>
CISSP (REQUIRED at time of submission)<ul><li>
Certification number must be included on resume</li><li>
Will be validated during background screening</li></ul></li></ul><h3 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h3><ul><li>
Experience in healthcare or other regulated environments (HIPAA, PHI protection).</li><li>
Experience working in Agile / Scaled Agile environments.</li><li>
Exposure to AI governance frameworks, compliance, or risk management practices.</li><li>
Experience with enterprise security monitoring, metrics, and risk reporting.</li></ul><h3 class="jobSectionHeader">
ADDITIONAL REQUIREMENTS</h3><ul><li>
Must demonstrate true architecture ownership (not just implementation or support roles).</li><li>
Must have current, hands-on involvement in AI security architecture initiatives.</li><li>
Strong communication skills with ability to explain complex security architectures to technical and non-technical stakeholders.</li><li>
Must be actively staying current with rapidly evolving AI security technologies and threats.</li></ul>
-
ARC Group is a Forbes-ranked top 20 recruiting and executive search firm working with clients nationwide to recruit the highest quality technical resources. We achieve this by understanding both our candidates&rsquo; and clients&rsquo; goals and serving both with integrity and a shared desire to succeed.
At ARC Group, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status.
Position offered with no fee to the candidate.
z3AXN0x92B</div>

Renesas

<div>Job Description 
About the role:
This role is responsible for making our software secure by design and keeping it secure throughout its lifecycle &mdash; from architecture and development to deployment and operations. The Architect will define security standards, embed security into engineering workflows, and ensure our SaaS platform meets enterprise-grade security and compliance expectations.
 A day in the life of our Cloud Security Architect:<ul><li>
Define and maintain secure architecture patterns for cloud-native SaaS systems</li><li>
Review and approve system designs for security risks</li><li>
Lead threat modeling for new features and platform components</li><li>
Design secure multi-tenant isolation models</li><li>
Architect secure API frameworks and integration patterns</li><li>
Ensure tenant data isolation and encryption strategies</li><li>
Continuously improve Secure SDLC practices</li><li>
Define secure coding standards and guardrails</li><li>
Architect secure cloud environments</li><li>
Define IAM, least-privilege access models, and service-to-service authentication</li><li>
Participate in security audits and customer security reviews</li><li>
Lead security incident root-cause analysis for application-layer incidents</li><li>
Improve detection and monitoring for application-level threats</li><li>
Collaborate with SRE to ensure security does not compromise reliability</li></ul>
Who We&rsquo;re Looking For:<ul><li>
8+ years in software engineering, security engineering, or cloud architecture</li><li>
Strong expertise in cloud-native architecture (microservices, containers, Kubernetes)</li><li>
Deep understanding of application security (OWASP Top 10, secure coding)</li><li>
Strong knowledge of IAM, authentication protocols (OAuth2, OIDC, SAML)</li><li>
Experience designing secure multi-tenant SaaS systems</li><li>
Hands-on experience with one major cloud provider (AWS preferred)</li></ul>
Preferred Qualifications:<ul><li>
Experience in enterprise SaaS environments</li><li>
Experience with regulated industries (FedRAMP, CMMC)</li><li>
Knowledge of tenant-based encryption models</li><li>
Experience implementing zero-trust architecture</li><li>
Background in vulnerability disclosure or bug bounty programs</li></ul>
The salary range for this role is $240,000 - $260,000. Actual compensation packages within this range are based on a wide array of factors unique to each candidate and role requirements, including but not limited to skill set, years and depth of experience, certifications, and specific location. 
Additional Information<div></div> 
Renesas is an embedded semiconductor solution provider driven by its Purpose &lsquo;To Make Our Lives Easier.&rsquo; As the industry&rsquo;s leading expert in embedded processing with unmatched quality and system-level know-how, we have evolved to provide scalable and comprehensive semiconductor solutions for automotive, industrial, infrastructure, and IoT industries based on the broadest product portfolio, including High Performance Computing, Embedded Processing, Analog &amp; Connectivity, and Power. 
 
With a diverse team of over 22,000 professionals in more than 30 countries, we continue to expand our boundaries to offer enhanced user experiences through digitalization and usher into a new era of innovation. We design and develop sustainable, power-efficient solutions today that help people and communities thrive tomorrow, &lsquo;To Make Our Lives Easier.&rsquo; 
 
At Renesas, you can:<ul><li>
Launch and advance your career in technical and business roles across four Product Groups and various corporate functions. You will have the opportunities to explore our hardware and software capabilities and try new things.</li><li>
Make a real impact by developing innovative products and solutions to meet our global customers' evolving needs and help make people&rsquo;s lives easier, safe and secure.</li><li>
Maximize your performance and wellbeing in our flexible and inclusive work environment. Our people-first culture and global support system, including the remote work option and Employee Resource Groups, will help you excel from the first day.</li></ul>
Are you ready to own your success and make your mark?
Join Renesas. Shape Your Future with Us.
Renesas Electronics is an equal opportunity and affirmative action employer, committed to celebrating diversity and fostering a work environment free of discrimination on the basis of sex, race, religion, national origin, gender, gender identity, gender expression, age, sexual orientation, military status, veteran status, or any other basis protected by federal, state or local law. For more information, please read our Diversity &amp; Inclusion Statement.
Renesas Electronics deals with dual-use technology that is subject to U.S. export controls regulations. Under these regulations it may be necessary for Renesas to obtain U.S. government export license prior to release of technology to certain persons. The decision whether or not to file or pursue an export license application is at the sole discretion of Renesas.
We have adopted a hybrid model that gives employees the ability to work remotely two days a week while ensuring that we come together as a team in the office the rest of the time. The designated in-office days are Tuesday through Thursday for innovation, collaboration and continuous learning.</div>

Cloud Security Architect

Systems Limited

<div>
 
 
 About the Role
 
 
 
 We are looking for an AI Security Architect to design and establish the Enterprise AI Security Reference Architecture. This role will ensure that all GenAI and Agentic AI platforms are secure, compliant, and aligned with enterprise governance standards across the AI lifecycle.
 
 
 
 
 
 
 Responsibilities:
 
 
 <ul>
 <li>
 Define and publish the Enterprise AI Security Reference Architecture as the standard for secure AI design
 </li>
 <li>
 Identify trust boundaries, threat surfaces, and control points across the AI ecosystem
 </li>
 <li>
 Design security controls for AI models, RAG pipelines, agent frameworks, vector databases, and LLM APIs
 </li>
 <li>
 Align AI security architecture with ISO/IEC 42001 and identify gaps with remediation plans
 </li>
 <li>
 Design Agent Identity &amp; Access Management (IAM) frameworks for secure agent operations
 </li>
 <li>
 Establish secure lifecycle management for AI agents including provisioning, monitoring, and decommissioning
 </li>
 <li>
 Develop AI risk classification models and mitigation strategies
 </li>
 <li>
 Define security standards for LLM integrations, prompt management, and AI services
 </li>
 <li>
 Conduct architectural security reviews for AI solutions and platforms
 </li>
 <li>
 Collaborate with engineering and infrastructure teams to ensure secure deployments
 </li>
 </ul>
 
 
 
 
 
 Qualifications:
 
 
 <ul>
 <li>
 10+ years of experience in Cybersecurity Architecture or Enterprise Security
 </li>
 <li>
 Strong experience with GenAI platforms, LLM architecture, RAG pipelines, and agentic AI security
 </li>
 <li>
 Hands-on experience with Azure OpenAI, AWS Bedrock, vector databases, and API security
 </li>
 <li>
 Knowledge of OWASP Top 10 for LLM applications and AI-specific threat vectors
 </li>
 <li>
 Experience in designing security for cloud-native AI platforms
 </li>
 <li>
 Strong understanding of identity management, cryptography, and data protection
 </li>
 <li>
 Experience working in regulated industries such as financial services, healthcare, or legal
 </li>
 <li>
 Strong problem-solving, stakeholder management, and communication skills
 </li>
 </ul>
 
 Location: Khi/ Lhr/ Isb
 
</div>

AgFirst Farm Credit Bank

<div>Cloud Security Architect 
The Cloud Security Architect designs and governs secure cloud architectures that protect organizational data, applications, and platforms. They embed security into cloud strategy and solution delivery, ensuring cloud environments are resilient, compliant, and aligned with business and risk objectives. The Architect partners across engineering, security, and compliance teams to define standards, assess risks, and guide secure adoption of cloud and cloud native capabilities. 
What You&rsquo;ll do
Design and Govern Secure Cloud Architectures
<ul><li>Define and maintain cloud security architecture standards and patterns for public, private, and hybrid environments.
</li></ul><ul><li>Evaluate cloud solution designs to ensure alignment with security principles and organizational risk posture.
</li></ul><ul><li>Identify cloud security risks and recommend mitigation approaches that support business and technology goals.
</li></ul><ul><li>Advise teams on secure configuration and design decisions throughout the system lifecycle
</li></ul><ul><li>Demonstrate experience with AWS, Microsoft Azure, and other cloud solutions is a requirement
</li></ul><ul><li>Automate, provision and manage cloud resources across multiple environments with infrastructure as code (IaC) principles 
</li></ul>Integrate Security into Cloud Delivery and Operations
<ul><li>Collaborate with engineering and DevOps teams to embed security into cloud native designs, automation, and deployment workflows.
</li></ul><ul><li>Establish monitoring and alerting requirements to support visibility, threat detection, and incident response in cloud environments.
</li></ul><ul><li>Support cloud-related investigations by providing architectural insight and recommending remediation approaches.
</li></ul><ul><li>Promote consistent implementation of cloud security requirements across teams and environments.
</li></ul>Enable Cloud Security Awareness and Collaboration
<ul><li>Provide technical guidance and knowledge sharing to engineers and security team members.
</li></ul><ul><li>Partner with compliance stakeholders to ensure cloud solutions meet internal policies and regulatory expectations 
</li></ul>What You&rsquo;ll Need
Education Level
<ul><li>Bachelor's Degree in Computer Science, Information Security, Information Systems, or a related field.
</li></ul>OR
Master's Degree in Computer Science, Information Security, Information Systems, or a related field. 
<ul><li>
</li></ul>Work Experience
Years of Experience
<ul><li>7-9 years of experience in cybersecurity, including hands-on cloud security work and experience
</li>designing and securing cloud environments across multiple service models (e.g., SaaS, IaaS, PaaS). 
<li>
</li></ul>Knowledge, Skills, and Abilities Proficiency
Licenses and Certifications
<ul><li>AWS Certified Security &ndash; Specialty - Required
</li><li>AWS Certified Solutions Architect &ndash; Professional - Preferred
</li><li>CISSP Certified Information Systems Security Professional Preferred
</li><li>CISM - Certified Information Security Manager Preferred
</li></ul>Knowledge, Skills, and Abilities
<ul><li>Proficiency: Broad understanding of cloud security concepts, architectures, and shared responsibility models.
</li><li>Skilled Experience with cloud automation and provisioning approaches (e.g., infrastructure as code principles).
</li><li>Skilled Familiarity with monitoring, detection, and security operations practices related to cloud services.</li></ul></div>
 <div><div>AgFirst Farm Credit Bank provides financing, as well as technology and other value-added services, to association partners so they can lend to rural residents and agricultural operations of all sizes. We take pride in investing in our employees, our partners and our community.
</div><div>Find out more on AgFirst.com , and follow us on LinkedIn !</div></div>

Fellowship Health Resources, Inc.

<div>State of SC
100% on site
80-100w2

Duration of the Contract: 12 Months

Possibility for Extension: Yes

Our direct client has an opening for - Security Architect - Consultant 10794.
This position is up to 12 months, with the option of extension, in Columbia, SC

Please send rates and a resume. W2 only, no Subs allowed.

.
Bachelors Degree in an Information Technology or Information Security related field;
8+ years of experience in security architecture may be substituted in lieu of education

5+ years of experience with automation platforms or SOAR solutions

5+ years of experience in supporting large IT environments and/or system deployments

Experience with scripting and automation (Python, Bash, PowerShell, or similar)

Experience with Rest API's, JSON, and YAML

Familiarity with MITRE ATT &amp; CK framework

Experience working in multi-tenancy environment; multi-agency or enterprise service projects

Preferred Skills

CISSP, CISA, CISO or equivalent advanced security certifications (CEH, OSCP, GPEN)

Vendor certifications in SOAR or Automation technologies

Experience creating automations within the Cortex XSOAR platform

Knowledge of security monitoring use cases and incident response support.</div>

A4282826-- Security Architect -10794.

Altec Industries

<div>Responsibilities
The Application Security Architect partners with software development, platform, cybersecurity, and cloud engineering teams to embed security throughout the modern software development lifecycle (SDLC). This role focuses on secure-by-design practices, DevSecOps strategy, roadmap and enablement, and risk-based vulnerability management across internally developed, third-party, SaaS, and cloud-native applications. The AppSec Architect serves as the strategic owner of the Application Security Roadmap, defines target-state AppSec maturity aligned to business growth, and prioritizes AppSec investments and tooling rationalization. The role serves as a trusted advisor to development teams and the key contributor to the organization&rsquo;s overall Secure Software Development Program.
Key Responsibilities
Secure SDLC &amp; DevSecOps
<ul><li>Embed application security controls into CI/CD pipelines, including automated SAST, DAST, IAST, SCA, secrets detection, and IaC scanning.
</li><li>Establish standardized security controls across platforms.
</li><li>Design exceptions and compensating controls.
</li><li>Partner with development teams to implement shift-left security while maintaining delivery velocity.
</li><li>Define and maintain secure coding standards, security design patterns, and reference architectures.
</li><li>Participate in architecture and design reviews, including threat modeling for new applications and major changes.
</li><li>Perform research and development (R&amp;D) into existing processes and tooling opportunities
</li></ul>Application &amp; Cloud Security Assessment
<ul><li>Identify and assess security risks in web, mobile, API, SaaS, and cloud-native applications developed internally or by third parties.
</li><li>Perform or coordinate:
<ul><li>Source code reviews (manual and automated)
</li><li>Application vulnerability assessments and penetration tests
</li><li>API and microservices security testing &amp; analysis
</li><li>Cloud configuration and IaC security reviews
</li></ul></li><li>Validate findings, reduce false positives, and prioritize remediation based on business risk.
</li><li>Establish reusable security architecture patterns for cloud-native and distributed systems.
</li></ul>Vulnerability &amp; Risk Management
<ul><li>Manage application security findings through a centralized vulnerability or risk management platform.
</li><li>Work with development teams to define practical, risk-based remediation guidance.
</li><li>Track remediation progress, verify fixes, and support exception/risk acceptance processes.
</li><li>Contribute to application security metrics, KPIs, and executive-level reporting.
</li><li>Translate technical debt and vulnerabilities into business risk and exposure.
</li></ul>Open Source &amp; Supply Chain Security
<ul><li>Assess and manage risks related to open-source dependencies, libraries, and third-party components.
</li><li>Support Software Composition Analysis (SCA) and software supply chain security initiatives (e.g., dependency hygiene, SBOMs).
</li><li>Evaluate security posture of third-party applications and vendors in collaboration with risk management team.
</li><li>Verify compliance with third-party component licensing models
</li></ul>Software Compliance
<ul><li>Lead software compliance activities related to application vulnerabilities, data exposure, or insecure design.
</li><li>Support application-related forensic analysis and root-cause investigations.
</li><li>Assist with compliance and assurance activities related to secure development (e.g., NIST, ISO, SOC, internal audits).
</li></ul>Enablement &amp; Education
<ul><li>Develop and deliver application security training for developers and cybersecurity team
</li><li>Provide hands-on guidance and documentation to improve developer security maturity.
</li><li>Act as a security champion advocate, helping teams make informed security decisions.
</li></ul>Required Education, Experience, and Skills
<ul><li>High School Diploma/GED Required
</li><li>Bachelor&rsquo;s Degree (Technical Degree Preferred) and 6 Years Relevant Experience OR 8 Years Relevant Experience
</li><li>12+ years of combined experience across software engineering, platform/cloud engineering, application security, &amp; DevSecOps / SRE with strong cybersecurity ownership preferred
<ul><li>5+ years in hands-on software engineering or platform/cloud engineering preferred
</li><li>7+ years in application security, DevSecOps, or secure architecture preferred
</li></ul></li><li>Strong understanding of modern SDLCs, Agile, and CI/CD practices.
</li><li>Hands-on experience with at least one major programming language (e.g., Java, C#, Python, JavaScript).
</li><li>Practical knowledge of:
<ul><li>Web, mobile, and API security
</li><li>Authentication and authorization models (OAuth2, OIDC, JWT, SAML)
</li><li>OWASP Top 10 and API Top 10
</li></ul></li><li>Familiarity with cloud platforms (AWS, Azure, and/or OCI) and cloud-native services.
</li><li>Working knowledge of networking fundamentals, encryption, and secure communications.
</li><li>Excellent written and verbal communication skills, with the ability to translate security risk into business impact.
</li></ul>Preferred / Beneficial Qualifications
<ul><li>Experience with application security tools such as SAST, DAST, IAST, SCA, secrets scanning, or IaC security platforms.
</li><li>Experience securing containers, Docker, and serverless workloads.
</li><li>Knowledge of Infrastructure as Code frameworks (e.g., Terraform, CloudFormation).
</li><li>Familiarity with threat modeling frameworks (e.g., STRIDE).
</li><li>Security or development certifications such as:
<ul><li>CSSLP, CISSP, GWAPT, GWEB, OSWE, or equivalent
</li><li>Cloud security certifications (AWS, Azure, or GCP)
</li></ul></li></ul>Behavioral &amp; Professional Expectations
<ul><li>Strong collaboration skills; ability to influence without authority.
</li><li>Comfortable balancing security risk with business and delivery priorities.
</li><li>Highly organized, detail-oriented, and self-directed.
</li><li>Customer-service mindset toward internal development teams.
</li><li>Ability to remain effective in fast-paced, evolving technical environments.
</li><li>Commitment to confidentiality, ethical conduct, and continuous improvement.
</li></ul>Additional Information
<ul><li>Travel: 0&ndash;25% (as needed)
</li><li>Work hours may occasionally include non-standard hours to support critical releases or incidents.
</li><li>Job level and scope may be adjusted based on experience and qualifications.
</li></ul>Experience Level Adjustmnt
Should the selected candidate meet the qualifications of a more experienced level in the career path, the job level may be adjusted.
Benefits
Altec offers a competitive salary that rewards performance and dedication, along with a comprehensive benefits package that includes:<ul><li>
Medical, Dental, Vision and Prescription Drug Program</li><li>
Retirement 401(k) Traditional or Roth Program Options with Company Match</li><li>
Vacation and Holidays</li><li>
Parental Leave</li><li>
Short Term and Long Term Disability Leave</li><li>
Flexible Spending Accounts</li><li>
Tuition Assistance Program</li><li>
Employee Assistance and Mental Health/Substance Abuse Program</li><li>
Life Insurance, Accidental Death and Dismemberment Insurance</li><li>
Supplemental Insurance including Hospital Indemnity, Critical Illness and Accident Insurance</li><li>
Additional Wellness Programs and Rewards Available</li></ul>
Why Join Altec?
If you're considering a career with Altec, there's never been a better time to join us! Our company was founded on values that place the customer first and prioritize our people as our greatest strength. Over the years, those values and our talented associates have helped us to earn the trust and confidence of customers worldwide. Today, Altec is an innovative, financially sound company that sets the standard of excellence in design, manufacturing and service &mdash; and that's why we're the ideal place for you to grow your career.
Founded in 1929, Altec is a privately held company headquartered in Birmingham, Alabama. Altec specializes in the manufacture, sale and service of aerial devices, digger derricks, cranes and specialty equipment for the electric utility, telecommunications, tree care, construction, and light and signs markets. We help our customers dig deeper and reach higher in more than 100 countries around the world.
EEO Statement
Altec Industries, Inc. and its affiliates are equal opportunity employers and maintain affirmative action plans to recruit, retain, develop, and promote qualified individuals without unlawful consideration of race, gender, color, religion, sexual orientation, gender identity, national origin, age, disability, citizenship status, veteran status, or any other characteristic protected by federal, state or local law. Altec strives to maintain a work environment free from unlawful discrimination and harassment, where associates are treated with respect and dignity.</div>

Application Security Architect

Search 10000+ Security architect jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 security architect jobs Near Me

AI Security Architect

AI Security Architect

Cloud Security Architect

AI Security Architect

Cloud Security Architect

A4282826-- Security Architect -10794.

Application Security Architect