Senior Application Security Architect — AI & Secure DevOps

CO1000 CDW, LLC; Illinois; Hybrid; USD 172,000 - 240,000; Full time

Job summary

CDW, LLC is seeking a Principal Application Security Engineer to lead secure engineering practices across applications, APIs, and delivery pipelines. You will drive secure design, threat modeling, and architectural decisions while embedding security into engineering at scale.

Responsibilities include high‑impact code reviews, designing guardrails, and partnering with DevOps, SRE, and platform teams. Strong hands‑on security, cloud/native architectures, and AI security experience are valued.

Qualifications

• 10+ years in Application Security Engineering with hands-on software security work.
• Deep expertise in secure architecture, secure coding practices, code vulnerability analysis, and threat modeling.
• Background in software engineering or architecture with credibility across design, code, build, and runtime.
• Strong knowledge of authentication/authorization, session management, API security, secrets management, and OWASP Top 10 issues.

Responsibilities

• Lead high-impact secure code reviews, threat models, and secure design assessments for applications, APIs, and shared services.
• Define and implement secure coding standards, reference architectures, playbooks, tooling, and automations at scale.
• Drive integration of security controls into CI/CD pipelines, workflows, and environments.
• Identify gaps and drive remediation through automation, platform improvements, and secure-by-design patterns.
• Provide leadership and guidance to engineering teams on secure development practices and AI security considerations.

Skills

Application security

Threat modeling

Secure design

CI/CD security

SAST

SCA

DAST

IaC security

Cloud security

API security

Tools

Terraform

Akamai

CI/CD tooling

Job description

CDW, LLC is seeking a Principal Application Security Engineer to lead secure engineering practices across applications, APIs, and delivery pipelines. You will drive secure design, threat modeling, and architectural decisions while embedding security into engineering at scale.

Responsibilities include high‑impact code reviews, designing guardrails, and partnering with DevOps, SRE, and platform teams. Strong hands‑on security, cloud/native architectures, and AI security experience are valued.