Onsite Application Security Architect — Richmond

BranCore Technologies; Richmond (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Onsite 4 days/week during probation

Contract extension possibility

Job summary

BranCore Technologies is seeking an Application Security Architect to define and oversee SSDLC across enterprise IT initiatives in a hybrid ecosystem spanning web apps, cloud-native systems, and GIS platforms.

You will lead data protection strategies, govern privacy posture, and classify/encrypt data across cloud data platforms while ensuring compliance with Virginia standards. Strong communication and deep security architecture experience are essential.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 10+ years in software engineering or security roles, incl. 2+ years designing security architecture.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• End-to-end security for data-at-rest, in-transit, and in-use across MS stack (Azure, SQL Server, Dynamics 365, Power Platform, ArcGIS).
• Threat modeling experience and security architecture reviews.
• Experience securing APIs, web apps, cloud platforms, CI/CD pipelines, and containerized workloads.
• Knowledge of identity, OAuth2.0, OpenID Connect, SAML, JWTs, PKI/TLS, encryption, secrets management.
• Ability to explain risks to engineers, PMs, execs, and nontechnical stakeholders.
• Strong written communication for architecture diagrams, standards, risk assessments.

Responsibilities

• Define application-security architecture principles, standards, patterns, and guardrails for web, mobile, API, microservice, and cloud-native systems.
• Perform architecture/design reviews; identify trust boundaries, attack paths, data flows, gaps, and controls.
• Lead or facilitate threat modeling for new apps, major features, and high-risk changes.
• Establish repeatable security requirements for authentication, encryption, data protection, and privacy.
• Partner with engineers to integrate security into the SDLC, including code review and CI/CD.
• Evaluate security tools (SAST, DAST, SCA, container scanning, API security).
• Define vulnerability-management approach for apps and dependencies; set SLAs and remediation processes.
• Assess third-party libraries and vendor components for security risk.
• Design IAM patterns (RBAC, MFA/SSO, service-to-service auth) and centralize audits.
• Secure hosting environments (Kubernetes, serverless, containers, cloud IAM, network segmentation).
• Advise incident-response on app-layer threats and contribute to post-incident improvements.
• Maintain architecture docs, risk registers, and decision records.

Skills

Application security

Threat modeling

Security architecture

Cloud security

CI/CD security

APIs security

Identity & access management

Secure coding concepts

Communication

Architecture documentation

Education

Bachelor’s degree in CS/ cybersecurity/ engineering

Tools

SAST

DAST

Microsoft Purview

Job description

BranCore Technologies is seeking an Application Security Architect to define and oversee SSDLC across enterprise IT initiatives in a hybrid ecosystem spanning web apps, cloud-native systems, and GIS platforms.

You will lead data protection strategies, govern privacy posture, and classify/encrypt data across cloud data platforms while ensuring compliance with Virginia standards. Strong communication and deep security architecture experience are essential.