Hybrid Application Security Architect

Accylerate; Richmond (VA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Accylerate is seeking an Application Security Architect in Richmond, VA with a strong SSDLC background. The role requires leading security architecture across web, API, and cloud-native systems, and coordinating threat modeling, risk assessments, and secure coding practices.

You will partner with software engineers to embed security in the SDLC, define guardrails, and supervise implementation of encryption, access controls, and monitoring.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 10 years in software engineering, application security, or related roles; includes design of security architectures.
• Strong understanding of secure software-development principles and OWASP Top 10.
• Experience designing end-to-end architectures with data-at-rest, in-transit, and in-use protections.

Responsibilities

• Define application-security architecture principles, standards, and guardrails for web, mobile, API, and cloud-native systems.
• Lead threat modeling for new applications and major features; facilitate reviews and risk assessments.
• Establish security requirements for authentication, authorization, encryption, and data protection across platforms.
• Partner with engineers to integrate security into the SDLC, CI/CD, IaC, testing, and production monitoring.
• Evaluate tools for SAST/DAST, container security, API security, and secret management.

Skills

SSDLC

Threat modeling

OWASP Top 10

Cloud security

CI/CD

Kubernetes

RBAC

Data classification

Encryption

SAST/DAST

Identity & access management

OAuth 2.0/OpenID Connect

Secure coding (Java/.NET/JS)

Communication with stakeholders

Education

Bachelor's degree in CS/Cybersecurity or related field

Equivalent practical experience

Tools

Azure

SQL Server

Dynamics 365

Power Platform

ArcGIS

Job description

Accylerate is seeking an Application Security Architect in Richmond, VA with a strong SSDLC background. The role requires leading security architecture across web, API, and cloud-native systems, and coordinating threat modeling, risk assessments, and secure coding practices.

You will partner with software engineers to embed security in the SDLC, define guardrails, and supervise implementation of encryption, access controls, and monitoring.