Senior AppSec Architect & Threat Modeling Lead

CLS Group; Woodbridge Township (NJ); On-site; USD 140,000 - 180,000; Full time

Job summary

CLS Group is seeking an Application Security Specialist in New Jersey to help development teams build secure software. This VP-level, hands-on role focuses on interpreting security findings and guiding engineers to secure implementations.

The incumbent will lead threat modelling, secure design reviews, and architecture risk assessments for new features and APIs, while promoting practical secure coding practices across the SDLC. This is a high-impact, non-tooling leadership position.

Qualifications

• Degree in a technology discipline or equivalent practical experience.
• Security certifications such as CISSP, CSSLP, GWAPT, GWEB preferred but not required.

Responsibilities

• Analyze and validate findings from SAST, DAST, SCA, API security testing, and code reviews.
• Assess vulnerabilities in context, considering exploitability and business impact.
• Explain issues to developers, prioritize remediation, and support secure implementation choices.
• Lead or facilitate threat modelling and architecture risk reviews for new features and APIs.
• Promote secure coding standards and practical guidance to reduce recurring issues.
• Provide AppSec expertise to improve testing, reporting, and SDLC processes without tool ownership.

Skills

AppSec experience

Secure coding

Vulnerability management

Threat modelling

Communication with engineering teams

Architecture risk reviews

Education

Bachelor's degree in CS / related

Security certifications (CISSP, CSSLP, GWAPT, GWEB)

Job description

CLS Group is seeking an Application Security Specialist in New Jersey to help development teams build secure software. This VP-level, hands-on role focuses on interpreting security findings and guiding engineers to secure implementations.

The incumbent will lead threat modelling, secure design reviews, and architecture risk assessments for new features and APIs, while promoting practical secure coding practices across the SDLC. This is a high-impact, non-tooling leadership position.