Principal Application Security Architect - 861

Quantinuum; Broomfield (CO); On-site; USD 184,000 - 230,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k) with company match

Paid holidays and vacation

Paid parental leave

Equity or stock options

Job summary

Quantinuum seeks a Principal Application Security Architect in Broomfield, CO to lead hands-on security reviews, threat modeling, and targeted testing across web services, APIs, and cloud workloads. You will architect and tune SAST/DAST tooling, and embed security gates in CI/CD to deliver fast, actionable feedback.

You will collaborate with engineering to design secure architectures, translate vulnerabilities into business risks, and stay current with emerging threats and security technologies.

Qualifications

• Bachelor's degree required.
• 10+ years in application security/penetration testing or secure software development.
• 5+ years hands-on software engineering experience.
• U.S. Person as defined by contract requirements (citizenship/permanent resident/green card).
• Security clearance considerations due to national security requirements.

Responsibilities

• Perform manual code reviews to find logic flaws and vulnerabilities.
• Lead threat modeling sessions before coding starts.
• Test web services, APIs, and cloud workloads to verify defenses.
• Architect and tune enterprise SAST/DAST/scanning tools for high-quality results.
• Integrate security gates into CI/CD pipelines for fast feedback.
• Review PRs with engineering to ensure secure fixes.

Skills

OWASP Top 10

SANS CWE

Secure coding practices

Java

Python

JavaScript

Go

Cloud-native security

Education

Bachelor's Degree

Tools

SAST

DAST

CI/CD tooling

Job description

We are seeking a Principal Application Security Architect in our Broomfield, CO, Location.

Key Responsibilities:

Hands-on Engineering & Assessment

• Perform manual reviews of code to find logic flaws and vulnerabilities that automated scanners often miss.


• Lead hands-on threat modeling sessions for complex systems to build security requirements before the first line of code is written.


• Conduct targeted technical testing of web services, APIs, and cloud workloads to verify that our defenses are working as intended.

Governance & Tooling

• Architect and manage the enterprise scanning ecosystem including the technical tuning of SAST, DAST, and dependency scanning tools to ensure high-quality results.


• Build and maintain security gates directly within CI/CD pipelines to provide developers with fast and actionable feedback.


• Work side-by-side with engineering teams to review pull requests and ensure that security fixes are technically sound and effective.

Risk Management & Compliance

• Create the "Golden Patterns" for authentication, encryption, and data handling so that engineering teams have a secure roadmap to follow.


• Ensure compliance with regulatory frameworks (e.g., CIS CSC18, NIST CSF, ISO27001, GDPR, SOC 2).


• Establish technical standards for how we identify and prioritize vulnerabilities based on real-world exploitability and business impact.

Collaboration & Advisory

• Partner closely with product and engineering teams to design secure architectures for all new applications and major feature releases.


• Serve as the organization's primary subject matter expert on application security tools, modern attack methodologies, and defensive coding.


• Translate complex technical vulnerabilities into clear business risks for both technical teams and non-technical executive stakeholders.

Continuous Improvement

• Stay current with emerging threats, vulnerabilities, and security technologies.


• Drive automation in security testing and monitoring.


• Contribute to the evolution of enterprise application security strategy.

YOU MUST HAVE:

• Bachelor's Degree Minimum Required


• Minimum 10+ years of experience in application security, penetration testing, or secure software development required


• Minimum 5+ years of hands-on software engineering experience required.


• Due to Contractual requirements, must be a U.S. Person defined as, U.S. citizen permanent resident or green card holder, workers granted asylum or refugee status.


• Due to national security requirements imposed by the U.S. Government, candidates for this position must not be a People's Republic of China national or Russian national unless the candidate is also a U.S. citizen.

WE VALUE:

• Bachelor's degree in computer science, Cybersecurity, Infor ation Systems, or related field preferred (or additional relevant work experience in lieu of degree)


• Strong technical knowledge of OWASP Top 10, SANS CWE, and secure coding practices.


• Fluency in at least two modern programming languages (e.g., Java, Python, JavaScript, Go)


• Hands-on experience building and tuning SAST and DAST processes at an enterprise level.


• Expert knowledge with cloud-native application security (AWS, Azure, GCP).


• Professional certifications such as CISSP, CSSLP, OSCP, or GWAPT preferred.


• Excellent analytical, problem-solving, collaboration, and communication skills.

Compensation & Benefits

Incentive Eligible -- Range posted is inclusive of bonus target

The pay range for this role is $184,000 -- $230,000 annually. Actual compensation within this range may vary based on the candidate's skills, educational background, professional experience, and unique qualifications for the role.

Quantinuum is the world leader in quantum computing. The company's quantum systems deliver the highest performance across all industry benchmarks. Quantinuum's over 650 employees, including 400+ scientists and engineers, across the US, UK, Germany, and Japan, are driving the quantum computing revolution.

By uniting best-in-class software with high-fidelity hardware, our integrated full-stack approach is accelerating the path to practical quantum computing and scaling its impact across multiple industries.

By joining Quantinuum, you'll be at the forefront of this transformative revolution, shaping the future of quantum computing, pushing the limits of technology, and making the impossible possible.

• A competitive salary and innovative, game-changing work


• Flexible work schedule


• Employer subsidized health, dental, and vision insurance


• 401(k) match for student loan repayment benefit


• Equity, 401k retirement savings plan + 12 Paid holidays and generous vacation + sick time


• Paid parental leave


• Employee discounts

Quantinuum is an equal opportunity employer. You will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, or veteran status.

Know Your Rights: Workplace discrimination is illegal

Applications will be accepted on an ongoing basis, there is no application deadline for this position.

$184,000 - $230,000 a year

PI284980685