Senior Application Security Architect - Hybrid & Impact

State Street; Quincy (MA); Hybrid; USD 120,000 - 203,000; Full time

Job summary

State Street is seeking a Senior Application Security Architect to design, review, and govern security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will collaborate with software engineering, data science, cloud engineering, cybersecurity, and business teams to embed security throughout the software and AI development lifecycle.

The role requires deep expertise in application security, SSDLC, and AI security, with hands-on experience in

Qualifications

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
• 14+ years of experience in application security, software engineering, security architecture, AI security, or related disciplines; at least 8 years hands-on cybersecurity.
• Experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid, and on-premises environments.
• SSDLC, OWASP Top 10, API security, secure coding practices, and app security testing methodologies.
• Strong understanding of AI/ML architectures, LLMs, RAG, agentic systems, model security, and responsible AI principles.
• Experience with cloud-native tech, containers, Kubernetes, CI/CD, DevSecOps, and IaC.
• Threat modeling, architecture reviews, penetration test remediation, and risk assessments.

Responsibilities

• Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging tech.
• Define and maintain application security and AI security standards and requirements.
• Conduct security architecture reviews, threat modeling, and design assessments for apps, APIs, and AI solutions.
• Partner with development, cloud, AI engineering, and cybersecurity teams to embed security controls across lifecycles.
• Provide expertise in secure coding, app security testing, API security, authentication, authorization, AI security, and data protection.
• Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third-party AI services.
• Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise.
• Evaluate emerging security threats, technologies, and industry standards.

Skills

Application security

SSDLC

AI security

Cloud-native security

Threat modeling

Security architecture

Communication

Stakeholder management

Education

Degree in Computer Science, Cybersecurity, IT, Engineering, Data Science, or related discipline

Job description

State Street is seeking a Senior Application Security Architect to design, review, and govern security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will collaborate with software engineering, data science, cloud engineering, cybersecurity, and business teams to embed security throughout the software and AI development lifecycle.

The role requires deep expertise in application security, SSDLC, and AI security, with hands-on experience in