Application Security Architect

Nerdio; México; A distancia; MXN 2,653,000 - 3,111,000; Jornada completa

Descripción de la vacante

A technology company is seeking an experienced Application Security Architect to enhance security measures in the software development lifecycle. The position involves establishing the AppSec program, collaborating with engineers on best practices, and mentoring junior team members. The ideal candidate has a deep knowledge of application security and is dedicated to continuous improvement. This role offers a competitive salary and attractive benefits including flexible paid time off.

Servicios

Competitive Base and Incentive Plan

Stock Options

Health and Welfare Plans

Unlimited Flexible Paid Time Off

Formación

• 10+ years of experience in application security or a related field.
• Experience in establishing an Application Security program.
• Strong understanding of common vulnerabilities.

Responsabilidades

• Establish and improve the AppSec program’s strategy.
• Collaborate with engineers on security best practices.
• Participate in secure code review and penetration testing.

Conocimientos

Application security expertise

Security fundamentals

Risk assessment

Code review experience

Communication skills

Herramientas

SAST tools

DAST tools

Descripción del empleo

Nerdio adds value on top of the powerful capabilities in Azure Virtual Desktop, Windows 365, and Microsoft Intune by delivering hundreds of features that simplify management, ensure efficient operations, and lower Azure compute and storage costs by up to 80% via automation.

Leveraging Nerdio, partners can manage customers’ cloud environments through streamlined, multi-tenant, workflow-powered technology that allows them to create and grow cloud-based recurring revenues. Enterprise IT professionals can deliver and maintain a wide range of virtual Windows endpoints across hybrid workforces with ease and fine-tune end-user computing (EUC) approaches for maximum effectiveness using powerful monitoring and analytics capabilities.

We are a fast-moving, nimble company looking for individuals who are collaborative, empathetic, driven and who love to move at the speed of light. If you want to be part of the AVD transformation that Microsoft and Nerdio are leading, then we want to speak with you.

Nerdio's growing security team seeks an Application Security Architect to help us enhance the security of our cutting-edge. Partnering closely with our engineering and product teams, you will play a vital role in applying your security expertise throughout the software development lifecycle. The architect will be a key contributor to evolving the Application Security program from inception.

What You'll Do

• Establish and continuously improve the AppSec program’s strategy, processes, and tooling.
• Collaborate with engineers to integrate security best practices into design reviews, threat modeling, code reviews, and penetration testing.
• Participate in secure code review and penetration testing efforts, honing your skills with hands‑on experience under the guidance of senior team members.
• Contribute to deep‑dive security reviews of our web, mobile, and API products to ensure they adhere to secure design principles.
• Participate in security training and share your learnings with the broader engineering team to foster a culture of security awareness.
• Assist in incident response to gain valuable real‑world experience and help protect Nerdio's systems and data.
• Gain exposure to SAST/DAST tools and risk assessment, building a foundation for future growth.
• Mentor junior members of the AppSec team to support their professional growth and skill development.

What we are looking for

• 10+ years of experience in application security or a related field, with a passion for learning and growing your skillset.
• Someone who has led the initial inception of the Application Security program from the ground up.
• A solid understanding of security fundamentals and common vulnerabilities (e.g., XSS, CSRF, SQL Injection).
• A knack for identifying potential risks and collaborating with engineers to find effective solutions.
• The ability to effectively communicate security concepts to both technical and non‑technical audiences.

Preferred Qualifications

• Actively engaged in the security community through participation in B-sides conferences, OWASP chapter activities, and regular contributions to GitLab repositories, fostering continuous learning and collaboration.

Benefits and Incentives

• Competitive Base and Incentive Plan
• Stock Options
• Health and Welfare Plans*
• Life and Disability Plans*
• Retirement Plan*
• Unlimited Flexible Paid Time Off, including your birthday off!

*Benefits for international employees, outside the US, vary by country.

Nerdio is committed to a diverse and inclusive workplace. Nerdio is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

The pay range for this role is:

145,000 - 170,000 USD per year (Remote (United States))