AppSec Architect: Lead Security Program & Pen-Testing

nerdio-careers; United States; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Stock Options

Health and Welfare Plans

Life and Disability Plans

Retirement Plan

Unlimited PTO (including your birthday

Collaborative Team Culture

Job summary

Nerdio is seeking an Application Security Architect to help advance our AppSec program across web, mobile, and API products. You will partner with engineering and product teams to embed security throughout the software lifecycle and evolve the program from inception.

Ideal candidates bring 10+ years in application security, lead the program’s inception, and demonstrate deep vulnerability knowledge with strong communication skills to diverse audiences.

Qualifications

• 10+ years of experience in application security or a related field.
• Led the initial inception of the Application Security program.
• Strong understanding of common vulnerabilities (e.g., XSS, CSRF, SQL Injection).
• Ability to communicate security concepts to technical and non-technical audiences.
• Collaborates with engineers to integrate security into design reviews and testing.

Responsibilities

• Establish and continuously improve the AppSec program’s strategy, processes, and tooling.
• Collaborate with engineers to integrate security best practices into design reviews, threat modeling, code reviews, and penetration testing.
• Participate in secure code review and penetration testing efforts, honing your skills with hands‑on experience under the guidance of senior team members.
• Contribute to deep-dive security reviews of our web, mobile, and API products to ensure they adhere to secure design principles.
• Participate in security training and share your learnings with the broader engineering team to foster a culture of security awareness.
• Assist in incident response to gain valuable real-world experience and help protect Nerdio's systems and data.
• Gain exposure to SAST/DAST tools and risk assessment, building a foundation for future growth.
• Mentor junior members of the AppSec team to support their professional growth and skill development.

Skills

Application Security

Program inception leadership

Threat modeling

Secure code review

Communication to stakeholders

Vulnerability knowledge (XSS/CSRF/SQLi

Job description

Nerdio is seeking an Application Security Architect to help advance our AppSec program across web, mobile, and API products. You will partner with engineering and product teams to embed security throughout the software lifecycle and evolve the program from inception.

Ideal candidates bring 10+ years in application security, lead the program’s inception, and demonstrate deep vulnerability knowledge with strong communication skills to diverse audiences.