Senior App Security Architect – Cloud-Native & Automation

IBM Computing; San Jose (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

IBM Software is seeking a Staff Application Security Engineer to help shape and advance the security posture of on-premises products and cloud services. You will partner with Engineering and Product leadership to embed security into the core architecture and lifecycle of our platforms.

You will define secure design standards, build scalable security tooling, and lead cross-functional initiatives to reduce risk across a global, distributed environment.

Qualifications

• 10+ years of hands-on application security experience in large-scale distributed systems.
• Strong knowledge of web app and cloud-native security fundamentals.
• Ability to partner with Engineering and Product leadership to embed security in architecture.
• Experience securing CI/CD pipelines and automated guardrails.
• Experience in Go, Python, or Java for security tooling.
• Data-driven decision-making balancing security with velocity and engineering trade-offs.

Responsibilities

• Identify security risks early and influence secure-by-design decisions across the organization.
• Define threat modeling frameworks and lead security design reviews for complex distributed systems.
• Serve as SME for product security reviews, overseeing code reviews and API testing with remediation guidance.
• Architect and drive the roadmap for security automation and scalable tooling.
• Design and deploy automation support that integrates security into cloud-native deployment pipelines.
• Lead vulnerability research initiatives and tabletop exercises to stay ahead of threats.
• Deploy advanced technology controls to maximize observability and harden key surfaces.

Skills

Security architecture

Threat modeling

Security design reviews

CI/CD security

Cloud security

Go/Python/Java

Cross-functional leadership

Security automation

Job description

IBM Software is seeking a Staff Application Security Engineer to help shape and advance the security posture of on-premises products and cloud services. You will partner with Engineering and Product leadership to embed security into the core architecture and lifecycle of our platforms.

You will define secure design standards, build scalable security tooling, and lead cross-functional initiatives to reduce risk across a global, distributed environment.