Application Security Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and oversee a top-tier application security program utilizing Wiz as the foundational platform.

• Streamline security processes throughout the software development life cycle, encompassing code scanning, open-source dependency assessments, secrets detection, container and infrastructure-as-code scanning, along with release gates.

• Create a security framework for AI-assisted development, which includes guidelines for AI coding agents, evaluation of AI-generated code, and safeguarding of secrets and data.

• Conduct threat modeling and secure design reviews for new products and features.

• Recognize and mitigate weaknesses, vulnerabilities, and misconfigurations prior to production deployment.

• Suggest and integrate tools that address gaps not covered by Wiz.

• Ensure findings are precise, prioritized, and accessible within developers' existing tools.

• Guide and mentor the Application Security team.

• Collaborate with Cloud and AI Security Architects.

⛳️ Requirements

• A minimum of eight years of experience in software development and application security.

• Proficient in writing production-level code.

• Hands-on experience with Wiz, particularly in code, pipeline, and cloud-to-code functionalities.

• Extensive knowledge of contemporary build pipelines such as GitHub, GitLab, Azure DevOps, or similar platforms.

• Experience in automating security within build pipelines.

• Regular, practical use of AI coding tools like Claude Code, Cursor, or GitHub Copilot.

• A well-defined perspective on securing AI coding tools.

• Strong skills in threat modeling.

• In-depth understanding of the OWASP Top 10, including the OWASP Top 10 for Large Language Model Applications.

• Experience in securing cloud-native applications, containers, and APIs.

• Capability to lead through credibility rather than authority.

• Bonus: Contributions to open-source security tools, conference presentations, or published research.

• Bonus: Experience in financial services or another regulated SaaS environment.

• Bonus: Experience in implementing security controls as policy as code.

🏝️ Benefits

• Medical/Rx, dental, vision, disability, and life/AD&D insurance plans.

• Flexible Savings Account (FSA).

• Health Savings Account (HSA).

• Employee Assistance Plan (EAP).

• Health advocacy services.

• Voluntary ancillary plans: accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance.

• 401(k) retirement savings plan with company matching contributions.

• Paid time off.