Hybrid Lead Application Security Architect

Raymond James & Associates; Saint Petersburg (FL); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid work model

St. Petersburg Office

Job summary

Raymond James & Associates is seeking a Lead Security Architect to strengthen our security posture by focusing on secure design reviews, threat modeling, and remediation across on-prem and cloud environments. This role emphasizes collaboration with development teams to remediate vulnerabilities in design and code.

The ideal candidate has extensive experience in security engineering/architecture, OWASP, encryption, and defense-in-depth strategies, with strong communication to cross-functional

Qualifications

• 6+ years in security engineering/architecture roles.
• Strong knowledge of OWASP Top 10 and secure design principles.
• Experience designing secure architectures for on-prem and cloud (AWS/Azure).
• Familiarity with OAuth, MFA, SSO, and passwordless auth.
• Expertise in encryption technologies and secure communications.
• Experience with incident response and defense-in-depth strategies.

Responsibilities

• Lead secure design reviews and threat modeling for new applications and changes.
• Collaborate with development teams to remediate vulnerabilities in code and design.
• Create and maintain secure reference architectures aligned with business needs.
• Act as trusted security advisor to integrate security in the SDLC.

Skills

Design reviews

Threat modeling

Vuln remediation

Web app security

Cloud security

OAuth/MFA/SSO

Encryption

Incident response

Security architecture

Communication

AI security (LLMs)

Education

Bachelor's in Computer & Information Science

Bachelor's in Information Technology

Tools

AWS

Azure

Job description

Raymond James & Associates is seeking a Lead Security Architect to strengthen our security posture by focusing on secure design reviews, threat modeling, and remediation across on-prem and cloud environments. This role emphasizes collaboration with development teams to remediate vulnerabilities in design and code.

The ideal candidate has extensive experience in security engineering/architecture, OWASP, encryption, and defense-in-depth strategies, with strong communication to cross-functional