Senior App Security Architect: Threat Modeling & CI/CD

United Airlines; Chicago, Northern (IL, KY); Hybrid; USD 112,000 - 147,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Parental leave

Employee assistance program

Commuter benefits

Paid holidays

Paid time off

401(k) and flight privileges

Job summary

United Airlines is building a culture of security within its Digital Technology team. We seek a Senior Architect - Application Cybersecurity to validate security across services, applications and websites, integrating security into the product lifecycle from design to deployment.

You will define security requirements, perform assessments and guide developers on remediation and best practices. You will engage with product teams, leverage SAST/DAST/SCA, and contribute to threat modelling,

Qualifications

• Bachelor's degree in STEM or Computer Science.
• Minimum 4 years experience in threat modeling, secure coding, identity management or cloud computing.
• Understanding of OWASP Top 10 and CWE-25; able to implement remediation strategies.
• Collaborate with development teams to build secure solutions and communicate risks clearly.
• Knowledge of vulnerabilities, encryption technologies, and authentication protocols.
• Must be legally authorized to work in the United States without sponsorship.
• Reliable, punctual attendance is an essential function of the position.

Responsibilities

• Perform security architecture design reviews and threat modelling of products (cloud and on-prem).
• Define security requirements and provide remediation guidance to developers.
• Evaluate new systems or changes for security and deployment guidance.
• Improve security through automation, CI/CD pipelines and tooling.
• Perform code analysis using SAST, DAST, SCA and manual vulnerability testing.
• Act as technical point of contact for product teams regarding automation and remediation.

Skills

Threat modelling

Secure coding

Identity management

Software development

Cryptography

System administration

Network security

Cloud computing

Education

Bachelor's degree

STEM/Computer Science

Tools

SAST

DAST

SCA scanning

OWASP Top 10

CWE-25

Job description

United Airlines is building a culture of security within its Digital Technology team. We seek a Senior Architect - Application Cybersecurity to validate security across services, applications and websites, integrating security into the product lifecycle from design to deployment.

You will define security requirements, perform assessments and guide developers on remediation and best practices. You will engage with product teams, leverage SAST/DAST/SCA, and contribute to threat modelling,