Lead App Security Architect - Secure Cloud & Zero Trust

Jones Lang Lasalle; Barcelona; Presencial; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Jones Lang Lasalle in Barcelona seeks a Senior Application Security Architect to bridge application security engineering with enterprise security architecture. You will design security architectures for apps, cloud-native environments, and integrations, guiding secure SDLC practices and threat modeling.

You will mentor peers, lead security reviews against OWASP, NIST, and SANS, and champion zero-trust and defense-in-depth strategies across engineering teams.

Formación

• Bachelor's degree in information security or related field.
• 7+ years in information security focusing on application security or architecture.
• Certifications such as CSSLP, CISSP, AWS/Azure Security Specialty or OSCP preferred.
• Strong communication with diverse stakeholders within large organisations.

Responsabilidades

• Design and maintain security architecture standards for enterprise apps, platforms and cloud-native environments.
• Lead security architecture reviews against OWASP, NIST and SANS frameworks.
• Mentor junior engineers on secure design practices and secure coding standards.
• Define enterprise security requirements and produce metrics to measure compliance.
• Lead threat modeling sessions and provide remediation guidance for features.

Conocimientos

Threat modeling

Secure design

Mentoring

Stakeholder comms

DevSecOps tooling

Zero-trust

Security patterns

Cloud architectures

OWASP Top 10

NIST CSF

Educación

Bachelor's degree in information security

Herramientas

CSSLP

CISSP

AWS/Azure Security Specialty

OSCP

Descripción del empleo

Jones Lang Lasalle in Barcelona seeks a Senior Application Security Architect to bridge application security engineering with enterprise security architecture. You will design security architectures for apps, cloud-native environments, and integrations, guiding secure SDLC practices and threat modeling.

You will mentor peers, lead security reviews against OWASP, NIST, and SANS, and champion zero-trust and defense-in-depth strategies across engineering teams.