Senior AppSec Architect - Build & Lead Security (Remote)

Vaco; Tampa (FL); On-site; USD 190,000 - 200,000; Full time

Benefits offered by this job

Discretionary bonuses

Medical, dental, and vision benefits

401(k) retirement plan

Job summary

Vaco is recruiting a Senior Level AppSec Architect to lead the establishment and evolution of our application security program. This full‑time, remote US role partners with engineering and product teams to embed secure design across web, mobile, and API products.

You will drive strategy, tooling, and hands‑on testing while mentoring the team and contributing to secure code reviews and threat modeling efforts.

Qualifications

• Must be a senior Application Security Architect capable with experience standing up an AppSec program from scratch; strong communicator; hands‑on and strategic
• 10+ years AppSec experience; deep understanding of common vulnerabilities (XSS, CSRF, SQL Injection); experience building AppSec programs.
• Experience with C#, React, JavaScript, REST APIs
• Participation in OWASP, BSides, open-source security projects, etc
• The ability to effectively communicate security concepts to both technical and non-technical audiences.

Responsibilities

• Establish and improve the AppSec program's strategy and tooling.
• Collaborate with engineers to integrate security best practices into design reviews, threat modeling, code reviews, and penetration testing.
• Participate in secure code review and penetration testing efforts, honing your skills with hands‑on experience under the guidance of senior team members.
• Contribute to deep‑dive security reviews of web, mobile, and API products to adhere to secure design principles.
• Participate in security training and share your learnings with the broader engineering team to foster a culture of security awareness.
• Assist in incident response to gain valuable real‑world experience and help protect Company's systems and data.
• SAST/DAST tool exposure and risk assessment, building a foundation for future growth.
• Mentor junior members of the AppSec team

Skills

Senior AppSec

Strong communicator

Hands-on & strategic

AppSec program

XSS

CSRF

SQL Injection

C#

React

JavaScript

REST APIs

OWASP

Technical communication

Job description

Vaco is recruiting a Senior Level AppSec Architect to lead the establishment and evolution of our application security program. This full‑time, remote US role partners with engineering and product teams to embed secure design across web, mobile, and API products.

You will drive strategy, tooling, and hands‑on testing while mentoring the team and contributing to secure code reviews and threat modeling efforts.