Senior Application Security Engineer - SDLC & AI Security

Arch Capital Group Ltd.; Farmington (CT); On-site; USD 127,000 - 172,000; Full time

Benefits offered by this job

Medical plans

401k matching

Paid time off

Job summary

Arch Capital Group Ltd. in Farmington, CT, seeks an Application Security Specialist to strengthen secure SDLC, deploy safeguards, assess vulnerabilities, and collaborate with engineers, architects, and product teams. This role emphasizes building robust controls and enabling secure software delivery.

You will lead AppSec strategy, implement SAST/DAST, enable secure-by-design, threat modeling, and AI security controls, focusing on CI/CD, containers, APIs, serverless, and cloud platforms.

Qualifications

• Undergraduate degree in a related field or equivalent.
• 5+ years of cybersecurity with significant hands-on application security experience.
• Experience supporting or leading security reviews for AI-native products or AI-assisted workflows.
• Experience performing threat modeling and secure architecture reviews.
• Strong experience deploying and operating DAST tools with CI/CD integration.
• Experience with SAST/SCA and other well-known application security tools.
• Experience with Azure and AWS cloud platforms.
• Familiarity with NIST, OWASP, MITRE standards; relevant certifications are a plus.

Responsibilities

• Guide Application Security strategy and secure the SDLC across projects.
• Configure and improve AppSec tooling and integrations for CI/CD with minimal noise.
• Drive API, Container, and Application Security testing (DAST, etc.).
• Develop strategies to secure containers, serverless, API, and AI/ML tech.
• Embed AI security checks into SSDLC reviews and code analysis.
• Provide hands-on engineering support for security incidents and vulnerability management.
• Gather and report metrics on security coverage, risk reduction, and program maturity.
• Create technical standards and procedures referencing NIST/OWASP/SANS.
• Provide security training to development and cloud teams on secure practices.

Skills

Application Security

Cybersecurity

Threat Modeling

CI/CD

SAST/DAST

Cloud Platforms

Security Reviews

NIST/OWASP

Education

Undergraduate degree or equivalent

Tools

SAST Tools

DAST Tools

Cloud (Azure/AWS)

Job description

Arch Capital Group Ltd. in Farmington, CT, seeks an Application Security Specialist to strengthen secure SDLC, deploy safeguards, assess vulnerabilities, and collaborate with engineers, architects, and product teams. This role emphasizes building robust controls and enabling secure software delivery.

You will lead AppSec strategy, implement SAST/DAST, enable secure-by-design, threat modeling, and AI security controls, focusing on CI/CD, containers, APIs, serverless, and cloud platforms.