Application Security Architect

Cybersecurity Jobs; Richmond (VA); Hybrid; USD 124,000 - 131,000; Full time

Job summary

Cybersecurity Jobs in a hybrid Richmond, VA role is seeking an experienced application security leader to design and implement enterprise-wide security strategy. You will guide security across cloud platforms, APIs, data platforms, GIS, and Power Platform, while addressing Agentic AI security approaches.

The role requires 10+ years in security engineering with strong SSDL, DevSecOps, and risk-management capabilities, plus hands-on work with Azure, Kubernetes, SAST/DAST, SCA, and modern auth

Qualifications

• 10+ years in software/application/security engineering.
• Application Security and security architecture experience.
• Threat modeling and architecture reviews.
• SSDLC / DevSecOps experience.
• Azure, Kubernetes, and cloud security experience.
• OWASP practices and application security testing methods including SAST and DAST.
• Software composition and risk coverage including SCA.
• API security experience.
• Authentication and authorization standards including OAuth, OIDC, SAML, JWT.
• Access control concepts including RBAC and ABAC.
• Data protection including data classification, encryption, DLP, and privacy.
• Experience with Microsoft Purview.
• Experience with SQL Server.
• Experience with Dynamics 365.
• Experience with Power Platform and ArcGIS.
• VITA/COV security standards is highly preferred.
• Bachelor’s degree or equivalent practical experience required.

Responsibilities

• Design and lead security strategies across enterprise applications.
• Apply security strategy across cloud platforms.
• Secure and govern APIs, including API security considerations.
• Support security across data platforms.
• Address security needs for GIS.
• Cover security for Power Platform.
• Develop security approaches for Agentic AI solutions.

Skills

Security engineering

Application security

Threat modeling

DevSecOps

Cloud security

OWASP practices

SAST

DAST

SCA

RBAC ABAC

Education

Bachelor's degree or equivalent

Tools

Azure

Kubernetes

Purview

SQL Server

Dynamics 365

Power Platform

ArcGIS

JWT

OAuth

OIDC

SAML

SAST

DAST

SCA

Job description

Design and lead application security strategy across enterprise platforms and services in a hybrid Richmond, VA role.

Responsibilities

• Design and lead security strategies across enterprise applications
• Apply security strategy across cloud platforms
• Secure and govern APIs, including API security considerations
• Support security across data platforms
• Address security needs for GIS
• Cover security for Power Platform
• Develop security approaches for Agentic AI solutions

Requirements

• 10+ years in software/application/security engineering
• Application Security and security architecture experience
• Threat modeling and architecture reviews
• SSDLC / DevSecOps experience
• Azure, Kubernetes, and cloud security experience
• OWASP practices and application security testing methods including SAST and DAST
• Software composition and risk coverage including SCA
• API security experience
• Authentication and authorization standards including OAuth, OIDC, SAML, JWT
• Access control concepts including RBAC and ABAC
• Data protection including data classification, encryption, DLP, and privacy
• Experience with Microsoft Purview
• Experience with SQL Server
• Experience with Dynamics 365
• Experience with Power Platform and ArcGIS
• Experience with VITA/COV security standards is highly preferred
• Bachelor’s degree or equivalent practical experience required

Technologies

• Azure
• Kubernetes
• OWASP
• SAST
• DAST
• SCA
• API Security
• OAuth, OIDC, SAML, JWT
• RBAC, ABAC
• Microsoft Purview
• SQL Server
• Dynamics 365
• Power Platform
• ArcGIS

Location and Work Arrangement

• Richmond, VA (hybrid)
• Local candidates only
• Initial onsite requirement: 4 days/week for 90 days
• Reduced onsite may be possible after the initial period

Compensation

• USD 90–95 per hour