Senior App Security Architect: Cloud, AI & API Security

State Street; Princeton (NJ); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401(k) with company match

Comprehensive health/dental/vision-ins

Paid time off and disability coverage

EAP & wellness programs

Job summary

State Street is seeking a Senior Application Security Architect to design, review, and govern security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will partner with software engineering, cloud engineering, data science, cybersecurity, and business teams to embed security throughout the software and AI development lifecycles.

You will drive secure-by-design principles, Zero Trust, and DevSecOps practices while evaluating AI security risks

Qualifications

• 14+ years in application security, software engineering, security architecture, or AI security.
• Degree in CS, Cybersecurity, IT, Engineering, Data Science, or related field.
• Experience securing enterprise-scale apps across cloud, SaaS, hybrid, and on-prem environments.
• SSDLC, OWASP Top 10, API security, secure coding, and testing methodologies.
• Deep knowledge of AI/ML architectures, LLMs, RAG, agentic systems, and prompt security.
• Experience with cloud-native tech, containers, Kubernetes, CI/CD, DevSecOps, IaC.
• Threat modeling, architecture reviews, pen-test remediation, and risk assessments.
• Familiar with SAST, DAST, IAST, SCA, API testing, model validation, AI security assessment techniques.
• Certifications such as CISSP, CSSLP, CCSP, TOGAF, SABSA, AWS/Azure security specialties are desirable.
• Experience in financial services or regulated industries is preferred.

Responsibilities

• Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems.
• Define and maintain application security and AI security standards, architecture patterns, and security requirements.
• Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions.
• Partner with development, cloud, AI, and cybersecurity teams to embed security controls throughout lifecycles.
• Provide SME in secure coding, app security testing, API security, authn/authz, AI security, and data protection.
• Assess security risks of applications, AI models, training data, prompts, agents, integrations, and third-party AI services.
• Drive secure-by-design, Zero Trust, DevSecOps, and AI security best practices enterprise-wide.
• Evaluate emerging app and AI security threats, technologies, and industry standards.

Skills

Application security

Secure software development

AI/ML security

Security architecture

Threat modeling

Security risk assessment

Cross-functional collaboration

Education

Bachelor's in Computer Science/Cybersecurity/IT/Engineering/Data Science

Tools

Kubernetes

CI/CD

Infrastructure as Code

Job description

State Street is seeking a Senior Application Security Architect to design, review, and govern security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will partner with software engineering, cloud engineering, data science, cybersecurity, and business teams to embed security throughout the software and AI development lifecycles.

You will drive secure-by-design principles, Zero Trust, and DevSecOps practices while evaluating AI security risks