Application Security Architect

VRPRO IT; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

VRPRO IT, partnering with S&P Global, seeks an Application Security Architect focused on AI and GenAI security. You will secure enterprise applications, APIs, and microservices in a hybrid NYC/Jersey environment.

Responsibilities include threat modeling, security reviews, and embedding security into SDLC/CI/CD with SAST, DAST, and SCA. Define IAM, encryption, and policy-as-code for cloud-native apps on AWS/GCP with Kubernetes.

Qualifications

• 12+ years of experience in Application Security / Security Architecture is not stated; use provided items

Responsibilities

• Design and implement application security architecture across applications, APIs, and microservices.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
• Ensure secure coding practices aligned with OWASP Top 10 and API Security.
• Secure cloud-native applications across AWS/GCP, Kubernetes, and containers.
• Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
• Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency.
• Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
• Partner with engineering and security teams to drive security-by-design.

Skills

Application Security

Threat Modeling

OWASP Top 10

DevSecOps

Cloud Security

API Security

AWS/GCP

Kubernetes

AI Security

IAM / RBAC

Tools

Terraform

CI/CD Tools

Job description

Application Security Architect - AI / GenAI

Location: NYC / NJC - Hybrid

Client: S&P Global

FTE

Visa independent only

Role Overview

We are looking for an Application Security Architect with strong experience in Application Security, DevSecOps, Cloud Security, and AI/GenAI security. The role will focus on securing enterprise applications, APIs, microservices, and AI-powered applications.

Key Responsibilities

• Design and implement application security architecture across applications, APIs, and microservices.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
• Ensure secure coding practices aligned with OWASP Top 10 and API Security.
• Secure cloud-native applications across AWS/GCP, Kubernetes, and containers.
• Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
• Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency.
• Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
• Partner with engineering and security teams to drive security-by-design.

Required Skills

• 12+ years of experience in Application Security / Security Architecture.
• Strong knowledge of OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA.
• Experience with AWS/GCP, Kubernetes, Docker, CI/CD, Terraform.
• Strong understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
• Experience with GenAI/LLM, RAG, Agentic AI, or AI Security.
• Knowledge of LangChain/LangGraph, vector databases, and AI security controls is a plus.
• Strong communication and stakeholder management skills.