Information Security Architect: DevSecOps & AppSec

Molina Healthcare; United States; Remote; USD 72,371 - 156,803; Full time

Benefits offered by this job

Competitive benefits

Job summary

Molina Healthcare is seeking a Senior Application Security Architect to provide governance for the application security program and manage software supply chain risks. You will define secure-by-design patterns enabling secure delivery at scale, and partner with development, solution architects, DevOps, and security stakeholders to embed controls across the SDLC.

You will drive a shift-left DevSecOps model, guide AppSec tooling usage (SAST/DAST/SCA) within CI/CD, and help enforce governance while

Qualifications

• 3+ years in application security, software security, or DevSecOps.
• Knowledge of secure SDLC practices, threat modeling, and secure design.
• Experience with AppSec testing tools (SAST, DAST, SCA).
• Understanding OWASP Top 10, API security, and secure coding.
• Familiarity with CI/CD pipelines and DevOps tooling.

Responsibilities

• Partners with application teams to evaluate security risks across the SDLC.
• Supports threat modeling, secure design reviews, and architecture reviews.
• Defines secure architectural patterns, guardrails, and reusable controls.
• Guides integration of AppSec tools in CI/CD pipelines.
• Enforces security requirements and tracks vulnerabilities and risk acceptances.
• Collaborates with Security Champions and development teams to improve maturity.

Skills

Application security

Threat modeling

DevSecOps

CI/CD

OWASP Top 10

SAST

DAST

SCA

Security governance

Tools

SAST

DAST

SCA

Job description

Molina Healthcare is seeking a Senior Application Security Architect to provide governance for the application security program and manage software supply chain risks. You will define secure-by-design patterns enabling secure delivery at scale, and partner with development, solution architects, DevOps, and security stakeholders to embed controls across the SDLC.

You will drive a shift-left DevSecOps model, guide AppSec tooling usage (SAST/DAST/SCA) within CI/CD, and help enforce governance while