Lead Application Security Architect

Raymond James & Associates; Saint Petersburg (FL); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid work model

St. Petersburg Office

Job summary

Raymond James & Associates is seeking a Lead Security Architect to strengthen our security posture by focusing on secure design reviews, threat modeling, and remediation across on-prem and cloud environments. This role emphasizes collaboration with development teams to remediate vulnerabilities in design and code.

The ideal candidate has extensive experience in security engineering/architecture, OWASP, encryption, and defense-in-depth strategies, with strong communication to cross-functional

Qualifications

• 6+ years in security engineering/architecture roles.
• Strong knowledge of OWASP Top 10 and secure design principles.
• Experience designing secure architectures for on-prem and cloud (AWS/Azure).
• Familiarity with OAuth, MFA, SSO, and passwordless auth.
• Expertise in encryption technologies and secure communications.
• Experience with incident response and defense-in-depth strategies.

Responsibilities

• Lead secure design reviews and threat modeling for new applications and changes.
• Collaborate with development teams to remediate vulnerabilities in code and design.
• Create and maintain secure reference architectures aligned with business needs.
• Act as trusted security advisor to integrate security in the SDLC.

Skills

Design reviews

Threat modeling

Vuln remediation

Web app security

Cloud security

OAuth/MFA/SSO

Encryption

Incident response

Security architecture

Communication

AI security (LLMs)

Education

Bachelor's in Computer & Information Science

Bachelor's in Information Technology

Tools

AWS

Azure

Job description

Job Description Summary

Note: This position follows our hybrid-friendly schedule, so you get the best of both worlds - flexibility and collaboration. In office days are 3 days per week (including a Monday or Friday), in our St Petersburg, FL Corporate Office.

Job Description

The Raymond James Enterprise Application Security Architecture team is seeking a Lead Security Architect to strengthen our organization's security posture by focusing on secure design reviews, threat modeling, and vulnerability remediation. This role is integral to ensuring our applications and systems meet the highest security standards. The ideal candidate will be highly skilled in identifying, analyzing, and mitigating security risks, as well as collaborating with development teams to remediate vulnerabilities in both design and code effectively. Additionally, the position involves creating secure reference architectures informed by design reviews and industry best practices.

Key Responsibilities

• Lead secure design reviews and threat modeling exercises for new applications, features, and architectural changes, ensuring adherence to industry standards, regulatory requirements, and organizational security policies.
• Collaborate with development teams to identify and remediate vulnerabilities in application code and system designs, providing hands-on guidance and actionable recommendations.
• Create and maintain secure reference architectures to serve as a foundation for implementing secure systems, applications, and solutions aligned with the organization's specific needs and technologies.
• Act as a trusted advisor to development teams, integrating security considerations into the software development lifecycle and promoting secure coding practices.
• Assess conformance with architectural standards, focusing on reducing technical debt and optimizing enterprise assets such as systems, services, and information.
• Provide technical expertise on security matters, including encryption, identity and access management, and secure communication protocols.
• Stay current with emerging security threats, trends, and best practices, applying relevant insights to enhance the organization's security posture.
• Collaborate with cross-functional teams, including infrastructure, DevOps tooling, and compliance, to align security measures with organizational goals and ensure seamless integration.
• Support security incident response efforts by contributing architectural expertise and defense-in-depth strategies as needed.
• Perform other duties and responsibilities as assigned, including occasional non-standard shifts or on call.

Skills/Previous Experience

• More than six (6) years of experience in security engineering or architecture role, with a demonstrated focus on secure design reviews, threat modeling, and vulnerability management.
• In-depth knowledge of web application security principles, secure coding practices, and addressing common vulnerabilities (e.g., OWASP Top 10).
• Proficiency in designing secure architectures for on-premises and cloud (e.g. AWS, Azure) environments.
• Strong understanding of OAuth, authentication, and authorization mechanisms, including multi-factor authentication, single sign-on, and emerging technologies like password-less authentication.
• Experience in encryption technologies, such as certificate-based and token-based cryptography.
• Familiarity with network protocols, topologies, incident response, and defense-in-depth strategies.
• Experience with defense-in-depth strategies, understanding of incident response.
• Exceptional communication skills, capable of bridging the gap between technical and business stakeholders.
• Financial services experience is a plus but not required. The ability to quickly acquire relevant business acumen is essential.
• AI-Enabled Application Security: Experience leveraging artificial intelligence (AI) and large language models (LLMs) to identify, analyze, and remediate security vulnerabilities in custom-developed applications, including integrating AI-driven security capabilities into secure design reviews, code reviews, and DevSecOps processes.
• Enterprise AI Security: Experience designing and implementing security architectures and controls for the safe adoption of AI technologies in enterprise environments, including generative AI, AI agents, and Model Context Protocol (MCP) integrations, with a focus on protecting sensitive data, enforcing access controls, and mitigating AI-specific security risks.

Licenses/Certifications

• CISSP

Education

• Bachelor's - Completed: Computer and Information Science
• Bachelor's - Completed: Information Technology
• High School (HS) - Completed (Required)

Work Experience

General Experience - 6 to 10 years

Travel

Less than 25%

Workstyle

Hybrid

Compensation

The total compensation for this position includes base salary or wages, and may include components such as additional compensation (cash or equity), discretionary bonuses, or commissions. This position is eligible for a