Cloud App Security Architect (Threat Modelling & DevSecOps)

Alldus; Dublin; On-site; EUR 70,000 - 110,000; Full time

Job summary

Alldus in Dublin is seeking a hands-on Product Security Architect on a contract basis to shape application security strategy and drive secure delivery across cloud-native environments. You will work closely with engineering and platform teams to embed secure-by-design principles.

The role focuses on threat modelling, security design reviews, and embedding security controls across the SDLC in complex enterprise settings.

Qualifications

• 5+ years in Product Security, Application Security or Security Architecture.
• Strong expertise in Azure and AWS cloud environments.
• Hands-on experience in threat modelling and secure architecture reviews.
• Solid knowledge of SAST and DAST tools and associated methodologies.
• Experience conducting, managing or reviewing penetration testing activities.
• Strong understanding of DevSecOps, CI/CD security and Shift-Left security practices.

Responsibilities

• Lead threat modelling and security design reviews for cloud-based applications.
• Embed security controls and best practices across the SDLC.
• Integrate security testing into CI/CD pipelines and DevSecOps workflows.
• Drive application security initiatives, including SAST, DAST and penetration testing.
• Advise engineering teams on secure coding, cloud security and container security.
• Identify, assess, and mitigate security risks across applications, platforms and cloud services.
• Promote a security-first culture and support the adoption of Shift-Left security practices.

Skills

Threat modelling

Security design reviews

Cloud security

Azure

AWS

SAST

DAST

Penetration testing

DevSecOps

Container security

Shift-Left security

Tools

SAST tools

DAST tools

Job description

Alldus in Dublin is seeking a hands-on Product Security Architect on a contract basis to shape application security strategy and drive secure delivery across cloud-native environments. You will work closely with engineering and platform teams to embed secure-by-design principles.

The role focuses on threat modelling, security design reviews, and embedding security controls across the SDLC in complex enterprise settings.