Senior AppSec Architect: Secure Architect for APIs & Apps

Talanto; Poland; Remote; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Udemy for Business

Private medical care

Multisport card

Language lessons

Welcome pack

Job summary

Talanto is seeking a Senior Security Architect to lead security architecture design and assessments across applications, APIs, integrations, and hybrid environments. You will work as a Security SME, guiding projects from concept through implementation, and ensuring secure-by-design across solutions.

You will collaborate with cross-functional teams, focusing on identity, data protection, and trust boundaries while promoting secure development practices in a fast-moving, global tech environment.

Qualifications

• 5+ years in cybersecurity with practical Security Architecture/AppSec experience
• Proven ability to perform security architecture reviews, technical assessments and threat modeling
• Strong knowledge of web app, API security, authentication and authorization, data protection and encryption

Responsibilities

• Design and review secure architectures for IT solutions.
• Conduct security assessments, architecture reviews and threat modeling for applications, APIs and integrations.
• Act as Security SME across projects from concept to implementation.
• Translate security risks into technical requirements and actionable recommendations.
• Collaborate with Architects, Developers, DevOps, Cloud and Infrastructure teams to embed security in the lifecycle.

Skills

Security architecture

Threat modeling

AppSec

OWASP Top 10

OWASP ASVS

OWASP API Security Top 10

NIST SSDF

CWE Top 25

Identity & access management

English (B2)

Job description

Talanto is seeking a Senior Security Architect to lead security architecture design and assessments across applications, APIs, integrations, and hybrid environments. You will work as a Security SME, guiding projects from concept through implementation, and ensuring secure-by-design across solutions.

You will collaborate with cross-functional teams, focusing on identity, data protection, and trust boundaries while promoting secure development practices in a fast-moving, global tech environment.