Hybrid Enterprise App Security Architect—SSDLC & Cloud/API

Derex Technologies Inc; Richmond (VA); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Derex Technologies Inc is seeking an Application Security Architect to define and oversee security across enterprise IT initiatives, with a focus on secure SDLC, threat modeling, and data protection across cloud and on-premises environments.

The role requires 10+ years in related fields, a Bachelor’s degree or equivalent, and strong communication to engineers and executives. Hybrid work with on-site requirements in Virginia. CISSP/CSSLP/GIAC preferred.

Qualifications

• Bachelor’s degree in CS, cybersecurity, engineering, or equivalent experience.
• 10+ years in software engineering, application security, or related roles, with 2+ years designing security architecture.
• Strong knowledge of secure SDLC, OWASP Top 10, and security best practices.

Responsibilities

• Define app-security architecture principles and guardrails for web, mobile, API, microservices and cloud-native systems.
• Lead threat modeling for new apps and major features; review designs for security gaps.
• Establish repeatable security requirements for authentication, encryption, logging, and data protection.

Skills

SSDLC

Threat Modeling

Security Architecture

OWASP Top 10

Cloud Security

Identity & Access

Education

Bachelor’s degree or equivalent

Tools

Azure

SQL Server

Dynamics 365

Power Platform

ArcGIS

Job description

Derex Technologies Inc is seeking an Application Security Architect to define and oversee security across enterprise IT initiatives, with a focus on secure SDLC, threat modeling, and data protection across cloud and on-premises environments.

The role requires 10+ years in related fields, a Bachelor’s degree or equivalent, and strong communication to engineers and executives. Hybrid work with on-site requirements in Virginia. CISSP/CSSLP/GIAC preferred.