Application Security Architect

Curate Partners; United States; Remote; USD 152,000 - 189,000; Full time

Job summary

Curate Partners is seeking a skilled Application Security Architect for a remote contract role. You will advise on security architecture for various applications, ensuring compliance with key security standards and guiding risk assessments. Ideal candidates will have a strong background in IT/Security, solid programming skills, and substantial experience with application security methodologies.

Qualifications

• 6+ years in IT/Security with focused experience in Application Security.
• Expertise in OWASP ASVS, SSDLC principles, and CI/CD security.
• Strong programming skills in languages like Java, C++, Go, PHP.

Responsibilities

• Guide security architecture for cloud-native, mobile, and web applications.
• Ensure compliance with security standards like OWASP and Zero Trust principles.
• Advise on risk assessments and oversee the security of CI/CD pipelines.

Skills

Application Security Testing Methodologies

Cloud Security Architectures

Secure Code Reviews

Runtime Security Technologies

SAFe Practices

DevSecOps

Analytical Skills

Education

Bachelor's degree in Computer Science or Software Engineering

Job description

Direct message the job poster from Curate Partners

Recruitment Consultant at Curate Partners

This is a REMOTE 12 month contract

Must be USC or Green Card

As an Application Security Architect, you will serve as a strategic advisor, guiding security architecture for cloud-native, mobile, and web applications. You will ensure security principles such as Zero Trust, least privilege, and defense-in-depth are embedded into our systems. This role emphasizes advising on risk assessments, cloud security architectures, CI/CD pipelines, and software supply chain security, utilizing your hands-on expertise to inform strategic decisions. You will oversee compliance with OWASP ASVS, OWASP Mobile Top 10, and other internal and external security standards.

CANDIDATE PROFILE

Education and Experience

Required:

· Bachelor's degree in Computer Science, Software Engineering or equivalent experience/certification.

· 6+ years of experience in Information Technology/Security including:

o 3+ years of experience with Application Security testing methodologies (SAST, DAST, IAST, MPT).

· Software engineering background with deep proficiency in at least one high level programming language (e.g., Java, C++, Go, PHP)

· Hands-on expertise in cloud security architectures (AWS, GCP, Azure), including VPC design, subnet management, and IAM policies.

· Expert level knowledge of OWASP ASVS and OWASP WSTG and their applications to large enterprise environments.

· Expert level knowledge of MITRE CVE, CWE, CAPEC and ATT&CK.

· Expert level knowledge of SSDLC principles, best practices, and procedures.

· Experience performing secure code reviews, issue triage and determining the efficacy of remediation approaches.

· Experience in securing software supply chains and automating security checks in CI/CD pipelines.

· Understanding of container security and container orchestration platforms (e.g., EKS, OpenShift).

· Understanding of modern and conventional application architectures and the tradeoffs associated with their designs.

· Understanding of microservice and cloud native application architecture.

· Understanding of software design patterns and principles such as SOLID, Coupling, Cohesion and Abstraction

· Strong analytical and problem-solving skills with the ability to interpret complex data and articulate findings to diverse stakeholders.

· Strong understanding of runtime security technologies used to protect workloads and applications such as RASP.

· Demonstratable working knowledge of SAFe practices, principles, and roles.

· Experience in AppSec tools, DevSecOps and DevSecOps pipelines.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Curate Partners by 2x

Get notified about new Application Security Architect jobs in United States.

United States $152,000.00-$189,000.00 2 days ago

Cybersecurity Segment Head- Lifesciences

Cybersecurity ARCHITECT Engagement Manager

United States $175,000.00-$225,000.00 3 weeks ago

Director of Cloud Platform Engineering - Digital and Technology Partners - Remote

New York, NY $143,858.00-$239,662.00 1 day ago

Solution Architect- Application Networking and Security Division

Director of Cloud Platform Engineering - Digital and Technology Partners - Remote

New York, NY $143,858.00-$239,662.00 1 day ago

Texas, United States $160,000.00-$185,000.00 2 days ago

Pennsylvania, United States $100,000.00-$140,000.00 3 weeks ago

New York City Metropolitan Area $160,000.00-$200,000.00 4 months ago

Expert Software Architect - Internal Tools

Legacy Contingent - Expert Software Architect, Internal Tools

Greater Philadelphia $180,000.00-$200,000.00 3 days ago

Washington, DC $163,000.00-$180,000.00 1 week ago

Application Architect: SAP HANA Security

California, United States $119,283.00-$214,709.00 2 weeks ago

Florida, United States $119,283.00-$214,709.00 2 weeks ago

New York, United States $119,283.00-$214,709.00 2 weeks ago

Florida, United States $119,283.00-$214,709.00 2 weeks ago

California, United States $119,283.00-$214,709.00 2 weeks ago

Florida, United States $119,283.00-$214,709.00 2 weeks ago

Greater Minneapolis-St. Paul Area $150,000.00-$165,000.00 6 days ago

California, United States $119,283.00-$214,709.00 2 weeks ago

Senior Director- Cloud Security Services

New York, NY $175,000.00-$225,000.00 3 weeks ago

Sr. Splunk Enterprise Security App Dev/Administrator (Remote) – (BHJOB22048_762)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.