Staff Application Security Architect

Shield AI; Colombia; Remote; COP 449,516,000 - 672,702,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Shield AI is seeking a Staff Application Security Engineer to build and advance a scalable, developer-centered application security program with SDLC policy and standards across the organization.

You will lead steps to improve secure development, conduct threat modeling, manage vulnerabilities, and collaborate with product, platform, and development teams to ensure secure software from design to release.

Qualifications

• Minimum 7+ years in application security or related field.
• Experience designing or maturing secure SDLC across multiple teams.
• Strong knowledge of secure coding, testing, vulnerability management, and DevSecOps.
• Hands-on with SAST, DAST, SCA, and related tooling.
• Ability to translate policy into actionable development requirements.
• Experience with SBOM, VEX, build provenance, and secure artifact management.

Responsibilities

• Establish and improve company-wide secure SDLC policies, standards, control objectives, procedures, and supporting evidence requirements.
• Translate security policy into clear, achievable requirements for development, product, and platform teams without delivery friction.
• Assess maturity of development teams, CI/CD pipelines, source-control practices, build environments, and release processes; define and lead improvement roadmaps.
• Develop secure-development guidance, reference architectures, reusable patterns, security guardrails, and developer enablement materials.
• Partner with development teams to triage, remediate, and verify application-security findings.

Skills

Application security

DevSecOps

Secure SDLC

Security testing

Threat modeling

Tools

Snyk

Checkmarx

Veracode

GitHub Advanced Security

GitLab security tools

Semgrep

SonarQube

OWASP ZAP

Job description

Shield AI is seeking a Staff Application Security Engineer to build and advance a scalable, developer-centered application security program with SDLC policy and standards across the organization.

You will lead steps to improve secure development, conduct threat modeling, manage vulnerabilities, and collaborate with product, platform, and development teams to ensure secure software from design to release.