Application Security Architect – AI / GenAI

Reuben Cooley Inc.; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

Reuben Cooley Inc. in New York City and Jersey City is seeking an experienced Application Security Architect to drive security across enterprise applications, APIs, microservices, and GenAI-based solutions.

You will integrate security into SDLC, CI/CD pipelines, and cloud-native environments (AWS/GCP, Kubernetes), leading risk-based decisions and securing data, identities, and AI systems. The role requires strong collaboration with engineering and security teams and a design-first mindset.

Qualifications

• 12+ years in Application Security / Security Architecture.
• Strong knowledge of OWASP, threat modeling, secure SDLC and API security.
• Experience with cloud platforms (AWS/GCP), Kubernetes, Docker and Terraform.
• Familiarity with OAuth2, OIDC, JWT, IAM and RBAC/ABAC.
• Experience securing GenAI/LLM, RAG, and AI-powered apps.
• Knowledge of LangChain, vector databases, AI security controls is a plus.
• Excellent communication and stakeholder management skills.

Responsibilities

• Design and implement application security architecture across applications, APIs, and microservices.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
• Ensure secure coding practices aligned with OWASP Top 10 and API Security.
• Secure cloud-native applications across AWS/GCP, Kubernetes and containers.
• Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
• Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency.
• Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
• Partner with engineering and security teams to drive security-by-design.

Skills

Application Security Architecture

OWASP & Threat Modeling

Cloud Security (AWS/GCP)

Kubernetes & Docker

CI/CD & DevSecOps

GenAI AI Security

IAM / Authn & Authz

Tools

Terraform

Job description

Application Security Architect – AI / GenAI

Location: New York, NY & Jersey City, NJ

Duration: Permanent

Role Overview:

We are looking for an Application Security Architect with strong experience in Application Security, DevSecOps, Cloud Security, and AI/GenAI security. The role will focus on securing enterprise applications, APIs, microservices, and AI-powered applications.

Key Responsibilities:

• Design and implement application security architecture across applications, APIs, and microservices.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
• Ensure secure coding practices aligned with OWASP Top 10 and API Security.
• Secure cloud-native applications across AWS/GCP, Kubernetes, and containers.
• Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
• Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency.
• Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
• Partner with engineering and security teams to drive security-by-design.

Required Skills:

• 12+ years of experience in Application Security / Security Architecture.
• Strong knowledge of OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA.
• Experience with AWS/GCP, Kubernetes, Docker, CI/CD, Terraform.
• Strong understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
• Experience with GenAI/LLM, RAG, Agentic AI, or AI Security.
• Knowledge of LangChain/LangGraph, vector databases, and AI security controls is a plus.
• Strong communication and stakeholder management skills.