Senior AI-Driven AppSec Architect

Motion Recruitment; Charlotte (NC); Hybrid; USD 140,000 - 190,000; Full time

Job summary

The Financial Services Company in Charlotte, NC, is seeking a Principal Application Security Engineer on a hybrid arrangement for a 12-month contract with potential extensions. You will define and execute AppSec strategy for DCMS, drive AI-enabled security capabilities, and influence cross-functional stakeholders to deliver scalable SSDLC aligned outcomes.

The role requires deep expertise in threat modeling, SAST/DAST/SCA, pen testing, and security leadership to advance enterprise-wide security

Qualifications

• 7+ years of Engineering experience or equivalent.
• 7+ years of Application Security or Information Security Engineering experience at enterprise scale.
• Deep expertise in SSDLC controls including threat modeling, secure design, SAST, SCA, DAST, and penetration testing.
• Proven ability to define security strategy and deliver outcomes through influence and technical leadership.
• Experience securing GenAI and LLM-based applications, including adversarial testing and prompt-injection defenses.
• Experience designing AI-driven security automation or decisioning capabilities.
• Strong understanding of DevSecOps and CI/CD security integration.
• Experience working in highly regulated environments such as financial services.
• Relevant security certifications (CISSP, CSSP, CISM, or equivalent).

Responsibilities

• Consult as an expert to develop or influence initiatives and resources for highly complex business and technical needs across Engineering.
• Consult on the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, and advanced analytical and inductive thinking.
• Provide expertise to client senior leadership on innovative Engineering business solutions.
• Strategically engage with client personnel.
• Define and lead the Application Security strategy for DCMS in-scope applications using tier-based control models.
• Evaluate existing AppSec control coverage and establish baseline mappings by application tier.
• Identify control gaps and drive remediation and onboarding plans with application teams and stakeholders.
• Partner with Application Security Champions and engineering teams to ensure consistent adoption of required AppSec controls.
• Ensure alignment with enterprise SDLC requirements and defect remediation expectations.
• Identify and deliver AI and GenAI use cases that reduce manual AppSec effort and improve security coverage.
• Design and implement automated threat modeling using code, infrastructure-as-code, and application metadata.
• Develop adversarial testing capabilities for GenAI and LLM-based applications, including prompt injection and abuse scenarios.
• Lead initiatives for AI model scanning, integrity validation, and secure onboarding of models.
• Define protections for AI-specific risks including insecure prompt construction, tool misuse, and secrets exposure.
• Drive modernization of AppSec controls through automation, rationalization, and platform integration.
• Build proofs-of-concept and pilot new security capabilities, scaling successful solutions into production.
• Influence simplification of AppSec processes to improve developer experience while maintaining strong risk controls.
• Provide strategic guidance to senior leadership on Application Security priorities, risks, and investment decisions.
• Influence cross-functional teams without direct authority to achieve enterprise security outcomes.
• Research emerging threats and technologies and translate insights into actionable AppSec strategy.

Skills

Engineering experience

Application Security

SSDLC controls

Security strategy

GenAI security

AI security automation

DevSecOps

Regulated environment

Certifications CISSP CSSP CISM

Job description

The Financial Services Company in Charlotte, NC, is seeking a Principal Application Security Engineer on a hybrid arrangement for a 12-month contract with potential extensions. You will define and execute AppSec strategy for DCMS, drive AI-enabled security capabilities, and influence cross-functional stakeholders to deliver scalable SSDLC aligned outcomes.

The role requires deep expertise in threat modeling, SAST/DAST/SCA, pen testing, and security leadership to advance enterprise-wide security