Application Security Architect - Secure SDLC Solutions

Bank of America; Addison (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

Bank of America is seeking an experienced Application Security Solution Architect within Global Information Security. The role focuses on designing secure solutions across the application lifecycle, collaborating with Lines of Business and CIO teams to strengthen security posture.

The candidate will apply knowledge of laws and standards (NIST, ISO, OWASP) to establish policies and drive risk reductions, while guiding architecture and security best practices across enterprise projects.

Qualifications

• Knowledge of application security laws, rules, and guidelines (OWASP, NIST, ISO, CIS, SOX, OCC, PCI, DGPR, FISMA, FFIEC).
• Experience with SDLC security practices and pipelines.
• 2+ years in application security in a large organization.
• Cloud and on-prem designs knowledge for security.
• Strong data management and metadata handling skills.

Responsibilities

• Consults with business and operations to identify challenges and opportunities to improve technology use and effectiveness.
• Plans and prioritizes architecture runway to enable business epics/features.
• Performs design reviews to ensure non-functional requirements (security, performance, maintainability, scalability, usability, reliability).
• Leads high-level architecture shaping with evolving requirements, ensuring modularity and flexibility.
• Educates team members on best practices and standardized methods.
• Clarifies architecture and assists with system design for development teams.
• Uses templates and documentation to create architectural designs and suggest improvements.

Skills

Analytical Thinking

Architecture

Result Orientation

Solution Design

Technical Strategy

Application Development

Collaboration

Data Management

DevOps

Risk Management

Agile

Automation

Influence

Solution Delivery

Test Engineering

Education

CISSP certification (advantage)

Tools

Static/Dynamic SAST/DAST

Bill of Materials

Penetration Testing

Job description

Bank of America is seeking an experienced Application Security Solution Architect within Global Information Security. The role focuses on designing secure solutions across the application lifecycle, collaborating with Lines of Business and CIO teams to strengthen security posture.

The candidate will apply knowledge of laws and standards (NIST, ISO, OWASP) to establish policies and drive risk reductions, while guiding architecture and security best practices across enterprise projects.