Cybersecurity Architect

Glocomms; Tysons (VA); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Bonus potential

Benefits package

Job summary

Glocomms, partnering with a growing technology organization in Tysons, VA, seeks a Cybersecurity Architect to lead and mature application security across a diverse tech environment. You will collaborate with software engineering, architecture, infrastructure, and product teams to embed security throughout the SDLC.

This role requires 8+ years in security, strong knowledge of secure development practices, and experience with SAST/DAST/IAST.

Qualifications

• 8+ years in Application Security or related fields.
• Secure SDLC and vulnerability management knowledge.
• Experience with SAST/DAST/SCA/IAST and WAF.

Responsibilities

• Lead application security efforts and remediation prioritization.
• Review findings from security tools and assessments.
• Conduct threat modeling and design reviews for new apps/systems.
• Perform targeted code reviews focused on high-risk components, authentication, authorization, and API security.
• Partner with engineering teams to integrate security into CI/CD and DevSecOps processes.
• Develop and maintain security automation to improve detection, validation, and remediation workflows.
• Provide guidance on cloud application security, identity management, secrets management, and secure system design.
• Support security initiatives related to AI/LLM technologies, including data protection, prompt validation, and model security considerations.
• Deliver secure coding guidance, training, and best practices to development teams.
• Assist with incident response activities, security investigations, and continuous improvement initiatives.

Skills

Python

JavaScript

CI/CD

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

SAST

DAST

SCA

IAST

WAF

Job description

Glocomms is partnering with a growing technology organization that is seeking an experienced Cybersecurity Architect to lead and mature application security initiatives across a diverse technology environment. This individual will partner closely with software engineering, architecture, infrastructure, and product teams to embed security throughout the software development lifecycle.

Responsibilities

Glocomms is partnering with a growing technology organization that is seeking an experienced Cybersecurity Architect to lead and mature application security initiatives across a diverse technology environment. This individual will partner closely with software engineering, architecture, infrastructure, and product teams to embed security throughout the software development lifecycle.

Responsibilities

• Lead application security efforts, including vulnerability management and remediation prioritization.
• Review findings from security tools such as SAST, DAST, SCA, penetration testing, and other assessments.
• Conduct threat modeling and participate in architecture and design reviews for new applications and systems.
• Perform targeted code reviews focused on high-risk components, authentication, authorization, and API security.
• Partner with engineering teams to integrate security controls into CI/CD pipelines and DevSecOps processes.
• Develop and maintain security automation to improve detection, validation, and remediation workflows.
• Provide guidance on cloud application security, identity management, secrets management, and secure system design.
• Support security initiatives related to AI/LLM technologies, including data protection, prompt validation, and model security considerations.
• Deliver secure coding guidance, training, and best practices to development teams.
• Assist with incident response activities, security investigations, and continuous improvement initiatives.

Qualifications

• 8+ years of experience in Application Security, Software Engineering, DevSecOps, or a related cybersecurity discipline.
• Strong understanding of secure software development practices and common application security vulnerabilities.
• Experience with application security tools such as SAST, DAST, SCA, IAST, and WAF technologies.
• Proficiency with at least one programming language such as Python, JavaScript, C#, or similar.
• Knowledge of cloud-native environments, Kubernetes, and modern software architectures.
• Experience integrating security into CI/CD pipelines and development workflows.
• Strong communication skills with the ability to influence technical teams and stakeholders.
• Familiarity with AI/LLM security concepts is a plus.
• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field.

Additional Information

• Hybrid work environment of 4 days onsite and 1 day remote
• Candidates must be authorized to work in the United States; sponsorship is not available for this position
• Competitive compensation, bonus potential, and comprehensive benefits package