GenAI Application Security Architect - Cloud & APIs

Extend Information Systems Inc.; New York (NY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Extend Information Systems Inc. is seeking an Application Security Architect to lead security for enterprise applications, APIs, microservices, and AI-powered applications.

The role focuses on secure design, threat modeling, and embedding security across SDLC and CI/CD pipelines. You will drive secure coding practices, API and cloud security across AWS/GCP, Kubernetes, and containers, and define GenAI security controls.

Qualifications

• 12+ years of experience in Application Security / Security Architecture.
• Strong knowledge of OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA.

Responsibilities

• Design and implement application security architecture across applications, APIs, and microservices.
• Perform threat modeling, security reviews, and vulnerability assessments.
• Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools.
• Ensure secure coding practices aligned with OWASP Top 10 and API Security.
• Secure cloud-native applications across AWS/GCP, Kubernetes, and containers.
• Define security controls for GenAI, LLM, RAG, and Agentic AI applications.
• Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency.
• Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code.
• Partner with engineering and security teams to drive security-by-design.

Skills

Application Security Architecture

Threat Modeling

Secure SDLC

API Security

Cloud Security

Kubernetes

IAM & Access Control

GenAI Security

DevSecOps

SAST/DAST/SCA

OWASP Top 10

Tools

AWS

GCP

Kubernetes

Docker

Terraform

CI/CD

Job description

Extend Information Systems Inc. is seeking an Application Security Architect to lead security for enterprise applications, APIs, microservices, and AI-powered applications.

The role focuses on secure design, threat modeling, and embedding security across SDLC and CI/CD pipelines. You will drive secure coding practices, API and cloud security across AWS/GCP, Kubernetes, and containers, and define GenAI security controls.