Senior Application Security Architect — Secure SDLC Champion

Rocket Homes Real Estate LLC; Seattle (WA); On-site; USD 149,000 - 318,000; Full time

Job summary

Rocket Homes Real Estate LLC is seeking a Senior Application Security Architect to drive secure software patterns and SDLC integration. You will design standard security requirements, mentor teams, and mature security processes across product, engineering, and information security to bake security into every release.

You will lead threat modeling, secure design, and automated guardrails, aligning with regulatory and contractual requirements while enabling business velocity.

Qualifications

• 10+ years in information security or secure software development, or a bachelor’s plus 5+ years in related roles.
• Proven experience performing architectural threat modeling on complex systems using formal frameworks (STRIDE, DREAD, PASTA).
• Ability to read, write, and audit code for security vulnerabilities with actionable remediation guidance.
• Deep familiarity with Java ecosystem (preferred), plus .NET and/or Python.
• Proficiency in scripting languages (PowerShell, Bash, Python) for automation.
• Experience leveraging AI-assisted engineering tools while maintaining critical thinking to validate AI outputs.
• Hands-on experience with secure SDLC, DevSecOps CI/CD pipelines, SAST/DAST/SCA/Secret Scanning tooling, IAM (OAuth2.0, OIDC, SAML), container security (Docker, Kubernetes), and secure coding standards.
• Knowledge of least privilege, zero trust architectures, secure defaults, and secure input validation.

Responsibilities

• Perform security reviews of applications throughout the SDLC, including threat modeling and code reviews.
• Set strategic direction for AppSec initiatives, shift-left processes, and secure coding standards.
• Collaborate with software engineering, product, architecture, and information security teams to align goals.
• Identify opportunities to improve delivery pipelines and implement automated guardrails and remediations.
• Collaborate with business, product owners, architecture, and information security to enable secure software patterns and business velocity.
• Coordinate and drive initiatives for AppSec engineers to build and scale security strategies.
• Build processes to test compliance and effectiveness of security requirements via automated guardrails and continuous testing.
• Influence decisions on secure architecture, API design, authentication/authorization, and cloud deployment.
• Create and evangelize application security policy sets and secure design patterns.
• Work with development and audit teams to align architectures with upcoming compliance and regulatory requirements.
• Mentor engineers and information security staff on threat modeling, secure design, and vulnerability remediation techniques.

Skills

Threat modeling

Secure coding principles

Code audit

Automation scripting

AI tooling

DevSecOps

Cloud security

Zero trust

Education

Bachelor’s degree in computer science or information security

Tools

SAST/DAST/SCA tooling

Docker

Kubernetes

OAuth2.0 / OIDC / SAML

CI/CD security tooling

MITRE ATT&CK

STRIDE / DREAD / PASTA Threat Modeling

Job description

Rocket Homes Real Estate LLC is seeking a Senior Application Security Architect to drive secure software patterns and SDLC integration. You will design standard security requirements, mentor teams, and mature security processes across product, engineering, and information security to bake security into every release.

You will lead threat modeling, secure design, and automated guardrails, aligning with regulatory and contractual requirements while enabling business velocity.