Lead Application Security Architect for Scaled Delivery

CDW; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

CDW is seeking a Principal Application Security Engineer to lead hands-on security across applications, APIs, and delivery pipelines. You will influence secure engineering practices at scale, building guardrails and reference architectures while collaborating with developers, SRE, and DevOps teams.

You will drive security controls across CI/CD, define secure coding standards, and guide remediation with scalable patterns.

Qualifications

• 10+ years of experience in Application Security Engineering including hands-on security in software design, development, and delivery.
• Deep expertise in secure application architecture, secure coding practices, code-level vulnerability analysis, and threat modeling.
• Background in software engineering or architecture with the ability to engage at design, code, build, or runtime levels.
• Strong knowledge of authentication, authorization, session management, API security, secrets management, and OWASP Top 10.
• Experience with modern stacks such as C#, Java, Python, JavaScript/TypeScript, Go.
• Experience integrating security into CI/CD pipelines and engineering platforms (SAST, SCA, DAST, IaC scanning).
• Ability to investigate complex problems and drive remediation while balancing enterprise patterns with code details.

Responsibilities

• Lead high-impact secure code reviews, threat models, and secure design assessments for applications, APIs, and shared services.
• Drive secure coding standards, reference architectures, playbooks, tooling, and automations at scale.
• Embed security into CI/CD pipelines and developer workflows with engineering teams.
• Identify control gaps and drive remediation through automation and platform improvements.
• Partner with engineering teams to secure AI-enabled development and applications.

Skills

Secure coding

Threat modeling

CI/CD security

API security

Security architecture

Code review

Communication

Security leadership

Tools

SAST

SCA

DAST

IaC scanning

Container security

SBOM

Job description

CDW is seeking a Principal Application Security Engineer to lead hands-on security across applications, APIs, and delivery pipelines. You will influence secure engineering practices at scale, building guardrails and reference architectures while collaborating with developers, SRE, and DevOps teams.

You will drive security controls across CI/CD, define secure coding standards, and guide remediation with scalable patterns.