Lead DevSecOps & Application Security Architect

Medical Mutual; Brooklyn (OH); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Equipment provided

On-site fitness center

On-site cafeteria

Employee discounts

Cash rewards

Business casual attire

Job summary

Medical Mutual is seeking an Application Security & DevSecOps Architect to lead secure application architecture and embed security across the SDLC. The role acts as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security.

The candidate will drive secure design across multiple teams, integrate security tooling (SAST/DAST/SCA), and oversee cloud and container security in a hybrid on-site/office environment in Dublin, OH.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent combination of training/education and experience.
• 3-5-7 years proven ability to transfer technology to end-user environments depending on level (Architect I: 3 years, Architect II: 5 years, Architect III: 7 years).
• Experience influencing technical direction in application, databases, or infrastructure.

Responsibilities

• Act as a subject-matter expert (SME) to design secure architectures and advise on best practices.
• Assist in defining current and future state and transitional plan with incremental improvement.
• Collaborate in reviews of prospective software/hardware acquisitions for architecture compatibility.
• Review IT standards, policies, and develop architectural metrics and reports.
• Maintain awareness of IT industry developments and best practices.
• Perform other duties as assigned.

Skills

Influence technical direction

Security architecture mindset

Education

Bachelor's degree in Computer Science or related field

Tools

Snyk/Wiz/Checkmarx/Veracode/Semgrep/SonarQube

Qualys/Burp Suite/OWASP ZAP/Invicti

SCA and IaC scanning

Docker/Kubernetes

Azure DevOps, GitHub Actions, Jenkins, GitLab

AWS/Azure security

Job description

Medical Mutual is seeking an Application Security & DevSecOps Architect to lead secure application architecture and embed security across the SDLC. The role acts as the primary technical authority for application security, vulnerability management, and DevSecOps pipeline security.

The candidate will drive secure design across multiple teams, integrate security tooling (SAST/DAST/SCA), and oversee cloud and container security in a hybrid on-site/office environment in Dublin, OH.