Hybrid App Security Architect - SSDLC & Data Protection

Ampcus Inc; Richmond (VA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Ampcus Inc. is seeking an experienced Application Security Architect to define and oversee SSDLC security across enterprise IT initiatives in a hybrid Richmond, VA environment.

You will lead threat modeling, security reviews, and data-protection strategies for web, API, and cloud-native systems. The role requires 10+ years in security-related roles, deep knowledge of secure SDLC, and experience with Azure, SQL Server, and ArcGIS platforms.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, engineering, or a related field (or equivalent practical experience).
• 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
• Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization and API abuse.

Responsibilities

• Define application-security architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture and design reviews, identify trust boundaries, attack paths, data flows, security gaps, and compensating controls.
• Lead or facilitate threat modeling for new applications, major features, integrations, and high-risk changes.
• Establish repeatable security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, API protection, and data protection.
• Partner with software engineers to integrate security throughout the SDLC, including code review, CI/CD pipelines, infrastructure as code, testing, release approval, and production monitoring.
• Evaluate and guide use of security tools such as SAST, DAST, software composition analysis, container/image scanning, API security testing, secret scanning, and runtime protection.
• Define a vulnerability-management approach for applications and dependencies, including severity criteria, remediation SLAs, exception processes, and verification of fixes.
• Assess third-party libraries, open-source dependencies, SaaS integrations, and vendor-provided components for security risk.
• Design identity and access-control patterns, including least privilege, MFA/SSO integration, service-to-service authentication, RBAC/ABAC, and privileged-access controls.
• Work with cloud and platform teams to secure application hosting environments, including Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
• Advise incident-response teams on application-layer threats and contribute to root-cause analysis and security improvements after incidents.
• Maintain architecture documentation, security decision patterns, risk registers, and exception documentation.

Skills

Security architecture design

Threat modeling

Cloud security

OWASP knowledge

Communication

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

SAST

DAST

CI/CD security

IAM

Job description

Ampcus Inc. is seeking an experienced Application Security Architect to define and oversee SSDLC security across enterprise IT initiatives in a hybrid Richmond, VA environment.

You will lead threat modeling, security reviews, and data-protection strategies for web, API, and cloud-native systems. The role requires 10+ years in security-related roles, deep knowledge of secure SDLC, and experience with Azure, SQL Server, and ArcGIS platforms.