Application Security Architect

InvestCloud, Inc.; United States; On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

401(k) with company match

Job summary

InvestCloud is seeking an Application Security Architect to design and lead our application security program, with Wiz as the core platform. You will automate security across the SDLC, integrate AI-assisted development guardrails, and mentor the AppSec team while collaborating with Cloud and AI Security Architects.

You will work across modern CI/CD pipelines, secure cloud-native applications, and APIs, ensuring findings are actionable and integrated into developer workflows.

Qualifications

• Eight+ years in software development and application security.
• Hands-on with Wiz, code, pipeline and cloud-to-code capabilities.
• Knowledge of modern build pipelines (GitHub, GitLab, Azure DevOps) and automating security.
• Experience with AI coding tools and securing them.
• Strong threat modeling skills and OWASP Top 10 knowledge, incl. LLM applications.
• Experience securing cloud-native apps, containers, and APIs.

Responsibilities

• Build and lead a world-class application security program.
• Automate security across the SDLC, including code scanning and dependency checks.
• Design security model for AI-assisted development and guardrails for AI coding agents.
• Lead threat modeling and secure design reviews for new products and features.
• Identify weaknesses and misconfigurations before production.
• Integrate tools to close security gaps and deliver findings inside developers' tools.
• Mentor AppSec team and partner with Cloud and AI Security Architects.

Skills

Software development

Application security

Wiz platform

DevOps

AI coding

Threat modeling

OWASP Top 10

Cloud security

Education

CS degree

Security certs

Tools

Wiz

GitHub

GitLab

Azure DevOps

CI/CD

Job description

We are looking for an Application Security Architect who thinks like a developer and builds like one. You will design and lead our application security program, with Wiz as our primary platform, and automate security into every step of how we build and ship software. You understand where software development is heading, including AI-assisted coding, and you help our developers get there faster and more safely. Developers should want to learn from you.

What You Will Do

• Build and lead a world-class application security program, with Wiz as the core platform.
• Automate security across the software development life cycle (SDLC), including code scanning, open-source dependency checks, secrets detection, container and infrastructure-as-code scanning, and release gates.
• Design the security model for AI-assisted development, including guardrails for AI coding agents, review of AI-generated code, and protection of secrets and data.
• Lead threat modeling and secure design reviews for new products and features.
• Find and design out weaknesses, vulnerabilities, and misconfigurations before they reach production.
• Recommend and integrate other tools where they close a real gap that Wiz does not cover.
• Make findings accurate, prioritized, and delivered inside the tools developers already use.
• Lead and mentor our AppSec team, and partner with our Cloud and AI Security Architects.

What Success Looks Like In Your First Year

• A world-class application security program runs on Wiz, with security checks automated at every step of building and releasing software.
• Developers fix issues quickly because findings are accurate, prioritized, and appear in the tools they already use.
• Developers move faster with AI coding tools and do it safely because this person designed the guardrails.
• Developers seek this person out for advice and see security as a partner.

What You Bring

• Eight or more years of experience across software development and application security, including hands‑on experience writing production code.
• Hands‑on expertise with Wiz, including its code, pipeline, and cloud‑to‑code capabilities, and a desire to build a program around it.
• Deep knowledge of modern build pipelines, such as GitHub, GitLab, Azure DevOps, or similar platforms, and how to automate security in them without slowing developers down.
• Daily, hands‑on use of AI coding tools such as Claude Code, Cursor, or GitHub Copilot, along with a clear point of view on securing them.
• Strong threat modeling skills and command of the OWASP Top 10, including the OWASP Top 10 for Large Language Model Applications.
• Experience securing cloud‑native applications, containers, and APIs.
• The ability to lead through credibility rather than authority.

Bonus Points

• Contributions to open‑source security tools, conference talks, or published research.
• Experience in financial services or another regulated SaaS business.
• Experience building security controls as policy as code.

Who You Are

• You hold yourself to a world‑class standard, and it shows in everything you deliver.
• You are a self‑starter. You find the work that matters and finish it without being asked.
• You care about this field beyond the job description. You keep learning and building on your own because you enjoy it, and you put in the extra effort when the mission calls for it.
• You bring drive, ambition, and a positive attitude to hard problems.
• You make the people around you better. You share what you know, you never make anyone feel small, and you let your work speak for itself.

How We Work

Our security team spans the United States, Romania, and India and protects the platforms that banks and wealth managers rely on every day. We hold a high bar, and we hold it together. The people on this team own their work from start to finish, keep learning because they want to, and make the people around them better. We do not reward the loudest voice in the room. We reward the best work, delivered with respect for the people it affects.

About InvestCloud

InvestCloud, a global leader in wealth technology, aspires to enable a smarter financial future. Driving the digital transformation of the wealth management industry, the company serves a broad array of clients globally, including Wealth and Asset Managers, Wirehouses, Banks, RIAs, and Insurers. In terms of scale, the company’s clients represent more than 40 percent of the $132 trillion of total assets globally. As a leader in delivering personalization and scale across advisory programs, including unified managed accounts (UMA) and separately managed accounts (SMA), the company is committed to the success of its clients. By equipping and enabling advisors and their clients with connected technology, enhanced intelligence, and inspired experiences, InvestCloud delivers leading digital wealth management and financial planning solutions, complemented by a dynamic data warehouse, which scale across the complete wealth continuum. In 2026, InvestCloud was named CNBC World’s Top Fintech Company, a proof point of the company’s commitment to innovation and client success. Headquartered in the United States, InvestCloud serves clients around the world. For more information, visit InvestCloud.com.

Our Values

• Client Connected
• Human Centered
• Technology Forward
• Respect + Integrity
• Excellence

The actual salary will vary based on applicant’s education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on the applicant’s geographic location. Salary range: $175,000 - $200,000. Benefits include medical/Rx, dental, vision, disability, and life/AD&D insurance plans, Flexible Savings Account (FSA), Health Savings Account (HSA), Employee Assistance Plan (EAP), health advocacy, voluntary ancillary plans (accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance), 401(k) retirement savings plan with company match, and paid time off.