AI-Powered AppSec Architect for Secure SDLC & CI/CD

Information Technology Senior Management Forum; Tempe (AZ); On-site; USD 120,000 - 204,000; Full time

Job summary

Edward Jones is hiring an Application Security Architect to lead hands-on design and integration of a CI/CD-aligned AI evaluation harness for secure source-code assessment. The role blends AppSec, DevSecOps, AI engineering, and secure SDLC governance aligned with financial-services compliance.

The candidate will architect the evaluation harness, integrate workflows with pipelines, maintain benchmarks and regression tests, and govern AI models and data protection, ensuring auditable and

Qualifications

• Bachelor's degree in a related field and 10+ years in app security, secure software engineering, DevSecOps, or related roles.
• Deep expertise in secure code review, vulnerability detection, threat modeling, and secure SDLC.
• Experience with vulnerability/penetration readouts and stakeholder communication.
• Hands-on with SAST, SCA, DAST, secrets scanning, API security testing, container security, and IaC scanning.
• Experience integrating security into SDLC tooling: Jenkins, GitHub Actions, GitHub Enterprise, Atlassian, and developer portals.

Responsibilities

• Architect the CI/CD-integrated AI secure-code evaluation harness for source code repositories and Secure SDLC lifecycles.
• Integrate evaluation workflows with pipeline tooling and AppSec reporting platforms.
• Design AI-assisted secure code review methods complementing SAST, SCA, DAST, and related scans.
• Maintain benchmarks, golden test cases, prompt/model versions, and regression tests for AI findings.
• Govern approved vendor and frontier AI models, including data-protection trade-offs.
• Define safeguards for proprietary production code, including access controls and evidence handling.
• Route validated findings into developer workflows with remediation guidance and feedback loops.
• Define metrics and control evidence aligned to governance, NIST, FINRA, SOX, GLBA frameworks.

Skills

Secure code review

Vulnerability detection

Threat modeling

SAST

SCA

DAST

Secrets scanning

API security testing

Container security

IaC scanning

DevSecOps tooling

Jenkins

GitHub Actions

GitHub Enterprise

LLMs for code review

Prompt engineering

RAG

Model evaluation

AI governance

Vendor governance

OWASP/NIST

Education

Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, Engineering, or related field

Tools

Jenkins

GitHub Actions

GitHub Enterprise

Atlassian

Job description

Edward Jones is hiring an Application Security Architect to lead hands-on design and integration of a CI/CD-aligned AI evaluation harness for secure source-code assessment. The role blends AppSec, DevSecOps, AI engineering, and secure SDLC governance aligned with financial-services compliance.

The candidate will architect the evaluation harness, integrate workflows with pipelines, maintain benchmarks and regression tests, and govern AI models and data protection, ensuring auditable and