Senior Application Security Architect - Hybrid (Richmond)

Cybersecurity Jobs

Richmond (VA)

Hybrid

USD 90,000 - 96,000

Part time

5 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

401(k) matching

Dental insurance

Health insurance

Vision insurance

Job summary

MasterApp Labs is seeking a Senior Application Security Architect to shape and operationalize application-security architecture principles across web, mobile, API, microservices, and cloud-native systems. This contract role is based in Richmond, VA with hybrid expectations, including onsite presence during an initial 90-day probationary period.

You will define guardrails, lead security reviews, and partner with engineering to embed security across the development lifecycle, covering

Qualifications

Bachelor's degree or equivalent practical experience in CS/cybersecurity/engineering.
10+ years in software engineering or security roles, with 2+ years designing security architecture for systems.
Strong knowledge of secure software development and OWASP Top 10.
Experience securing APIs, web apps, cloud platforms, and CI/CD pipelines.
Ability to explain technical risks and tradeoffs to engineers, PMs, and executives.

Responsibilities

Define architecture principles, standards, patterns, reference implementations, and guardrails for web, mobile, APIs, microservices, and cloud-native systems.
Lead architecture/design reviews to identify trust boundaries and security gaps.
Lead threat modeling for new apps, features, integrations, and high-risk changes.
Establish security requirements for authentication, authorization, encryption, secrets management, logging, privacy, and data protection.
Embed security across the SDLC with code review, CI/CD, IaC, testing, and production monitoring.
Guide use of security tooling (SAST, DAST, SCA, container scanning, API security testing, secret scanning, runtime protection).
Define a vulnerability-management approach for apps and dependencies, including SLAs and remediation verification.
Assess security risk in third-party libraries, OSS dependencies, SaaS integrations, and vendor components.
Design IAM patterns including MFA/SSO, RBAC/ABAC, and service-to-service auth.
Work with cloud/platform teams to secure Kubernetes, serverless, containers, CI/CD, cloud IAM, network segmentation, and secrets storage.
Advise incident-response teams on application-layer threats and contribute to post-incident improvements.
Maintain architecture documentation including security decision patterns, risk registers, and exception documentation.