Application Security Architect – AI / GenAI

Altimetrik; New York (NY); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Altimetrik seeks an accomplished Application Security Architect to fortify enterprise applications, APIs, microservices, and AI-powered solutions with strong DevSecOps and cloud security expertise.

You will design secure architectures, perform threat modeling, and embed security into CI/CD pipelines while aligning with OWASP Top 10 and API security practices. Ideal candidates have 12+ years in security architecture and a track record in GenAI security across AWS/GCP, Kubernetes, and containers.

Qualifications

• 12+ years of experience in Application Security / Security Architecture.
• Strong knowledge of OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA.
• Experience with AWS/GCP, Kubernetes, Docker, CI/CD, Terraform.
• Strong understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
• Experience with GenAI/LLM, RAG, Agentic AI, or AI Security.
• Knowledge of LangChain/LangGraph, vector databases, and AI security controls is a plus.
• Strong communication and stakeholder management skills.

Responsibilities

• Design and implement application security architecture across applications, APIs, and microservices.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
• Ensure secure coding practices aligned with OWASP Top 10 and API Security.
• Secure cloud-native applications across AWS/GCP, Kubernetes, and containers.
• Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
• Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency.
• Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
• Partner with engineering and security teams to drive security-by-design.

Skills

Application Security

Security Architecture

OWASP

Threat Modeling

Secure SDLC

API Security

SAST/DAST/SCA

AWS/GCP

Kubernetes

Docker

CI/CD

Terraform

OAuth2/OIDC/JWT

IAM/RBAC/ABAC

GenAI/LLM security

LangChain/LangGraph

Vector databases

Security communication

Tools

AWS

GCP

Kubernetes

Docker

CI/CD

Terraform

Job description

Altimetrik delivers outcomes for our clients by rapidly enabling digital business & culture and infuse speed and agility into enterprise technology and connected solutions. We are practitioners of end-to-end business and technology transformation. We tap into an organization’s technology, people, and assets to fuel fast, meaningful results for global enterprise customers across financial services, payments, retail, automotive, healthcare, manufacturing, and other industries. Founded in 2012 and with offices across the globe, Altimetrik makes industries, leaders and Fortune 500 companies more agile, empowered and successful.

Altimetrik helps get companies get “unstuck”. We’re a technology company that lives organizations a process and context to solve problems in unconventional ways. We’re a catalyst for organization’s talent and technology, helping teams push boundaries and challenge traditional approaches. We make delivery more bold, efficient, collaborative and even more enjoyable.

Application Security Architect – AI / GenAI

Location: NYC / NJC – Hybrid

Role Overview

We are looking for an Application Security Architect with strong experience in Application Security, DevSecOps, Cloud Security, and AI/GenAI security. The role will focus on securing enterprise applications, APIs, microservices, and AI-powered applications.

Key Responsibilities

• Design and implement application security architecture across applications, APIs, and microservices.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
• Ensure secure coding practices aligned with OWASP Top 10 and API Security.
• Secure cloud-native applications across AWS/GCP, Kubernetes, and containers.
• Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
• Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency.
• Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
• Partner with engineering and security teams to drive security-by-design.

Required Skills

• 12+ years of experience in Application Security / Security Architecture.
• Strong knowledge of OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA.
• Experience with AWS/GCP, Kubernetes, Docker, CI/CD, Terraform.
• Strong understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
• Experience with GenAI/LLM, RAG, Agentic AI, or AI Security.
• Knowledge of LangChain/LangGraph, vector databases, and AI security controls is a plus.
• Strong communication and stakeholder management skills.