Cybersecurity Architect: DevSecOps & AI Security (Hybrid)

Glocomms; Tysons (VA); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Bonus potential

Benefits package

Job summary

Glocomms, partnering with a growing technology organization in Tysons, VA, seeks a Cybersecurity Architect to lead and mature application security across a diverse tech environment. You will collaborate with software engineering, architecture, infrastructure, and product teams to embed security throughout the SDLC.

This role requires 8+ years in security, strong knowledge of secure development practices, and experience with SAST/DAST/IAST.

Qualifications

• 8+ years in Application Security or related fields.
• Secure SDLC and vulnerability management knowledge.
• Experience with SAST/DAST/SCA/IAST and WAF.

Responsibilities

• Lead application security efforts and remediation prioritization.
• Review findings from security tools and assessments.
• Conduct threat modeling and design reviews for new apps/systems.
• Perform targeted code reviews focused on high-risk components, authentication, authorization, and API security.
• Partner with engineering teams to integrate security into CI/CD and DevSecOps processes.
• Develop and maintain security automation to improve detection, validation, and remediation workflows.
• Provide guidance on cloud application security, identity management, secrets management, and secure system design.
• Support security initiatives related to AI/LLM technologies, including data protection, prompt validation, and model security considerations.
• Deliver secure coding guidance, training, and best practices to development teams.
• Assist with incident response activities, security investigations, and continuous improvement initiatives.

Skills

Python

JavaScript

CI/CD

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

SAST

DAST

SCA

IAST

WAF

Job description

Glocomms, partnering with a growing technology organization in Tysons, VA, seeks a Cybersecurity Architect to lead and mature application security across a diverse tech environment. You will collaborate with software engineering, architecture, infrastructure, and product teams to embed security throughout the SDLC.

This role requires 8+ years in security, strong knowledge of secure development practices, and experience with SAST/DAST/IAST.