Application Security Architect

SIDRAM TECHNOLOGIES; New York (NY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

S&P Global seeks an Application Security Architect to secure enterprise applications, APIs, microservices, and AI-powered apps. You will design security architectures, perform threat modeling, and weave security into SDLC and CI/CD with SAST/DAST/SCA, aligning with OWASP Top 10 and API security standards.

The role covers cloud-native security across AWS/GCP, Kubernetes, and containers, plus IAM and policy-as-code. Strong collaboration with engineering and security teams is required.

Qualifications

• 12+ years in Application Security / Security Architecture.
• Experience with OWASP, Threat Modeling, secure SDLC, API Security.
• Hands-on with SAST/DAST/SCA in SDLC pipelines.
• Strong knowledge of AWS/GCP, Kubernetes and container security.
• Understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
• GenAI/LLM, RAG, AI security, and prompt safety concepts.

Responsibilities

• Design and implement security architecture for applications, APIs and microservices.
• Lead threat modeling, security reviews and vulnerability assessments.
• Embed security into SDLC and CI/CD pipelines using SAST/DAST/SCA.
• Drive secure coding practices aligned with API security and OWASP Top 10.
• Secure cloud-native apps across AWS/GCP with Kubernetes and containers.
• Define security controls for GenAI, LLM, RAG and AI-enabled apps.
• Implement IAM, authentication, authorization, encryption and policy-as-code.
• Collaborate with engineering and security teams to drive security-by-design.

Skills

Application Security

Threat Modeling

Secure SDLC

API Security

SAST/DAST/SCA

GenAI/LLM Security

IAM / Access Control

OAuth2 / OIDC / JWT

Cloud Security (AWS/GCP)

Kubernetes / Containers

CI/CD / Terraform

Threat Intelligence & AI Security

Tools

AWS

GCP

Kubernetes

Docker

CI/CD

Terraform

Job description

NOW HIRING: APPLICATION SECURITY ARCHITECT AI / GENAI

Location: NYC / NJC Hybrid

Client: S&P Global

Position: Full-Time (FTE)

Visa: Independent Visa Candidates Only

Experience: 12+ Years

Role Overview

We are looking for an Application Security Architect with strong expertise in Application Security, DevSecOps, Cloud Security, and AI/GenAI Security to secure enterprise applications, APIs, microservices, and AI-powered applications.

Key Responsibilities

• Design and implement application security architecture across applications, APIs, and microservices.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Embed security into SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
• Drive secure coding practices aligned with OWASP Top 10 and API Security.
• Secure cloud-native applications across AWS/GCP, Kubernetes, and containers.
• Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
• Address AI security risks including prompt injection, data leakage, insecure outputs, and excessive agency.
• Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
• Partner with engineering and security teams to drive security-by-design.

Required Skills

• 12+ years in Application Security / Security Architecture.
• OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA.
• AWS/GCP, Kubernetes, Docker, CI/CD, Terraform.
• OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
• GenAI/LLM, RAG, Agentic AI, or AI Security experience.
• LangChain/LangGraph, vector databases, and AI security controls are a plus.
• Strong communication and stakeholder management skills.