DevSecOps Architect: Application Security & Secure SDLC

Jobgether; United States; On-site; USD 72,000 - 157,000; Full time

Benefits offered by this job

Competitive compensation

US-based role

Enterprise security exposure

Job summary

Jobgether is seeking an Architect, Information Security – DevSecOps/Application Security to lead secure design across a large, complex technology environment in the United States. The role blends hands-on security with architecture, risk management, and cross-functional collaboration to embed security controls throughout the SDLC.

You will champion a shift-left approach, promoting secure design patterns, software supply chain risk management, cloud-native architectures, APIs, and CI/CD security.

Qualifications

• 3+ years of professional experience in application security, software security, DevSecOps, or a closely related discipline.
• Strong knowledge of secure SDLC methodologies, threat modeling, secure architecture, and secure-by-design principles.
• Hands-on familiarity with application security testing tools and methodologies, including SAST, DAST, and SCA.

Responsibilities

• Partner with application, development, solution architecture, DevOps, and security teams to assess and manage application security risks across design, development, testing, and deployment.
• Conduct and support threat modeling, secure design assessments, and architecture reviews for applications, APIs, and cloud-native environments.
• Define, document, and promote secure architecture patterns, guardrails, reusable controls, and security requirements aligned with organizational AppSec standards.
• Guide teams in integrating and effectively using application security testing technologies, including SAST, DAST, and SCA, within CI/CD pipelines.
• Support the implementation and enforcement of security requirements, standards, and control gates throughout the software development lifecycle.
• Identify application and software supply chain security gaps and collaborate with engineering teams to develop practical, prioritized risk mitigation strategies.

Skills

Application security

Threat modeling

Secure SDLC

CI/CD security

SAST/DAST

Tools

SAST tools

Job description

Jobgether is seeking an Architect, Information Security – DevSecOps/Application Security to lead secure design across a large, complex technology environment in the United States. The role blends hands-on security with architecture, risk management, and cross-functional collaboration to embed security controls throughout the SDLC.

You will champion a shift-left approach, promoting secure design patterns, software supply chain risk management, cloud-native architectures, APIs, and CI/CD security.