Application Security Architect

InvestCloudOct2024; United States; Remote; USD 175,000 - 200,000; Full time

Job summary

InvestCloud is seeking an Application Security Architect who thinks like a developer and builds like one. You will design and lead the application security program with Wiz as the core platform, and automate security across the SDLC to help developers build faster and more safely.

You will lead threat modeling, review AI-generated code, protect secrets, and mentor the AppSec team while collaborating with Cloud and AI Security Architects.

Qualifications

• 8+ years in software development and application security.

Responsibilities

• Lead and design an enterprise application security program.
• Automate security across the SDLC with code scanning and dependency checks.
• Define AI-assisted development guardrails and review of AI-generated code.
• Lead threat modeling and secure design reviews for new products.
• Identify and remediate weaknesses and misconfigurations before production.
• Integrate additional tools to close security gaps.
• Mentor AppSec team and partner with Cloud/AI Security Architects.

Skills

Security architecture

Application security

Threat modeling

AI security

CI/CD automation

DevSecOps collaboration

Developer coaching

Security tooling

Education

Bachelor's degree in CS or related field

Tools

Wiz

GitHub

GitLab

Azure DevOps

Claude Code

Cursor

GitHub Copilot

Job description

We are looking for an Application Security Architect who thinks like a developer and builds like one. You will design and lead our application security program, with Wiz as our primary platform, and automate security into every step of how we build and ship software. You understand where software development is heading, including AI-assisted coding, and you help our developers get there faster and more safely. Developers should want to learn from you.

What You Will Do

• Build and lead a world-class application security program, with Wiz as the core platform.
• Automate security across the software development life cycle (SDLC), including code scanning, open-source dependency checks, secrets detection, container and infrastructure-as-code scanning, and release gates.
• Design the security model for AI-assisted development, including guardrails for AI coding agents, review of AI-generated code, and protection of secrets and data.
• Lead threat modeling and secure design reviews for new products and features.
• Find and design out weaknesses, vulnerabilities, and misconfigurations before they reach production.
• Recommend and integrate other tools where they close a real gap that Wiz does not cover.
• Make findings accurate, prioritized, and delivered inside the tools developers already use.
• Lead and mentor our AppSec team, and partner with our Cloud and AI Security Architects.

What Success Looks Like in Your First Year

• A world-class application security program runs on Wiz, with security checks automated at every step of building and releasing software.
• Developers fix issues quickly because findings are accurate, prioritized, and appear in the tools they already use.
• Developers move faster with AI coding tools and do it safely because this person designed the guardrails.
• Developers seek this person out for advice and see security as a partner.

What You Bring

• Eight or more years of experience across software development and application security, including hands‑on experience writing production code.
• Hands‑on expertise with Wiz, including its code, pipeline, and cloud‑to‑code capabilities, and a desire to build a program around it.
• Deep knowledge of modern build pipelines, such as GitHub, GitLab, Azure DevOps, or similar platforms, and how to automate security in them without slowing developers down.
• Daily, hands‑on use of AI coding tools such as Claude Code, Cursor, or GitHub Copilot, along with a clear point of view on securing them.
• Strong threat modeling skills and command of the OWASP Top 10, including the OWASP Top 10 for Large Language Model Applications.
• Experience securing cloud‑native applications, containers, and APIs.
• The ability to lead through credibility rather than authority.

Bonus Points

• Contributions to open‑source security tools, conference talks, or published research.
• Experience in financial services or another regulated SaaS business.
• Experience building security controls as policy as code.

Who You Are

• You hold yourself to a world‑class standard, and it shows in everything you deliver.
• You are a self‑starter. You find the work that matters and finish it without being asked.
• You care about this field beyond the job description. You keep learning and building on your own because you enjoy it, and you put in the extra effort when the mission calls for it.
• You bring drive, ambition, and a positive attitude to hard problems.
• You make the people around you better. You share what you know, you never make anyone feel small, and you let your work speak for itself.

How We Work

Our security team spans the United States, Romania, and India and protects the platforms that banks and wealth managers rely on every day. We hold a high bar, and we hold it together. The people on this team own their work from start to finish, keep learning because they want to, and make the people around them better. We do not reward the loudest voice in the room. We reward the best work, delivered with respect for the people it affects.

About InvestCloud

InvestCloud, a global leader in wealth technology, aspires to enable a smarter financial future. Driving the digital transformation of the wealth management industry, the company serves a broad array of clients globally, including Wealth and Asset Managers, Wirehouses, Banks, RIAs, and Insurers. In terms of scale, the company’s clients represent more than 40 percent of the $132 trillion of total assets globally. As a leader in delivering personalization and scale across advisory programs, including unified managed accounts (UMA) and separately managed accounts (SMA), the company is committed to the success of its clients. By equipping and enabling advisors and their clients with connected technology, enhanced intelligence, and inspired experiences, InvestCloud delivers leading digital wealth management and financial planning solutions, complemented by a dynamic data warehouse, which scale across the complete wealth continuum. In 2026, InvestCloud was named CNBC World’s Top Fintech Company, a proof point of the company’s commitment to innovation and client success. Headquartered in the United States, InvestCloud serves clients around the world. For more information, visit InvestCloud.com .

Our Values

• Client Connected
• Human Centered
• Respect + Integrity

The actual salary will vary based on applicant’s education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on the applicant’s geographic location. Salary range: $175,000 - $200,000. Benefits include medical/Rx, dental, vision, disability, and life/AD&D insurance plans, Flexible Savings Account (FSA), Health Savings Account (HSA), Employee Assistance Plan (EAP), health advocacy, voluntary ancillary plans (accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance), 401(k) retirement savings plan with company match, and paid time off.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.