Senior Application Security Architect DevSecOps Cloud

JLL; Barcelona; On-site; EUR 110,000 - 140,000; Full time

Job summary

JLL is seeking a Senior Application Security Architect to bridge security engineering and enterprise architecture. You will own security architectures for application ecosystems, drive SDLC security, and serve as a technical authority on secure patterns, threat modeling, and DevSecOps practices.

In this senior role, you will mentor engineers and collaborate across engineering, architecture, and business teams to reduce risk.

Qualifications

• Bachelor's degree or equivalent in a relevant field and 7+ years in information security with focus on application security or security architecture.
• Expert understanding of secure design patterns and security architecture for cloud-native platforms.
• Proven ability to lead security assessments, architecture reviews, and cross-functional initiatives.

Responsibilities

• Design and maintain security architecture standards for enterprise applications and cloud-native environments.
• Lead threat modeling sessions and provide actionable remediation guidance to development teams.
• Champion secure coding practices and DevSecOps integration across engineering teams.
• Communicate security designs and risk assessments to technical and non-technical stakeholders.

Skills

OWASP Top 10

DevSecOps

Cloud-native security

Threat modeling

Zero-trust

SAST

Architectural design

Education

Bachelor's degree in CS / InfoSec / SWE

Tools

AWS

Azure

GCP

Kubernetes

CI/CD tools

Job description

JLL is seeking a Senior Application Security Architect to bridge security engineering and enterprise architecture. You will own security architectures for application ecosystems, drive SDLC security, and serve as a technical authority on secure patterns, threat modeling, and DevSecOps practices.

In this senior role, you will mentor engineers and collaborate across engineering, architecture, and business teams to reduce risk.