Senior App Security Architect - Cloud & Data Protection

GlobalPoint; Richmond (VA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

GlobalPoint is seeking an experienced Application Security Architect to define and oversee security strategies across enterprise IT initiatives, emphasizing secure software architecture, threat modeling, cloud security, data protection, and DevSecOps across modern web applications and GIS platforms.

This role drives security throughout the SDLC, leads reviews, and collaborates with engineering, security, and business teams to reduce risk and enable innovative solutions in a hybrid onsite

Qualifications

• Bachelor's degree or equivalent practical experience in CS, cybersecurity, engineering, or related field.
• 10+ years of experience in software engineering, application security, security engineering, or related roles.
• At least 2 years designing security architectures for enterprise systems.
• Strong knowledge of secure SDLC practices and OWASP Top 10 vulnerabilities.
• Experience designing security architectures for Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS.
• Hands-on knowledge of data classification and protection tools such as Microsoft Purview, encryption, DLP policies, and privacy impact assessments.

Responsibilities

• Define application security architecture principles, standards, reference architectures, reusable patterns, and security guardrails for web, mobile, API, microservices, and cloud-native apps.
• Conduct architecture and design reviews to identify trust boundaries, attack paths, data flows, security gaps, and mitigating controls.
• Lead threat modeling for new applications, major enhancements, integrations, and high-risk changes.
• Establish security requirements for authentication, authorization, session management, encryption, secrets management, logging, privacy, and API protection.

Skills

Threat modeling

Security architecture

Cloud security

Data protection

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering

Tools

Azure

Microsoft Purview

Job description

GlobalPoint is seeking an experienced Application Security Architect to define and oversee security strategies across enterprise IT initiatives, emphasizing secure software architecture, threat modeling, cloud security, data protection, and DevSecOps across modern web applications and GIS platforms.

This role drives security throughout the SDLC, leads reviews, and collaborates with engineering, security, and business teams to reduce risk and enable innovative solutions in a hybrid onsite