Senior Architect, Application Security & Cloud-Native

IBM; Austin (TX); On-site; USD 170,000 - 230,000; Full time

Job summary

IBM Software, including Confluent, seeks a Staff Application Security Engineer to shape security strategy across on-prem and cloud services. You will lead architecture, embed security in the product lifecycle, and partner with Engineering and Product leadership to mitigate risks at scale.

You will design security automation, drive secure-by-design practices, and develop roadmaps for vulnerability management, with hands-on experience in distributed systems and cloud-native deployments.

Qualifications

• 10+ years of hands-on application security experience.
• Comprehensive knowledge of security fundamentals in modern web apps and cloud-native platforms.
• Ability to partner with Engineering and Product leadership to embed security into core architecture.
• Ability to lead investigation and response to security incidents and drive improvements via architecture and automation.
• Experience evolving the SDLC to embed security by default, securing CI/CD pipelines and deployment workflows.
• Experience in Go, Python, or Java and building scalable security automation frameworks.
• Data-driven, balancing security with business velocity and engineering trade-offs.
• Ability to raise the security bar through architectural reviews and guidance.

Responsibilities

• Partner with Engineering, Product, and Platform teams to identify security risks early and drive secure-by-design adoption.
• Define and standardize threat modeling frameworks and security design standards; lead reviews for complex distributed systems.
• Serve as SME for product security reviews, oversee security code reviews and API testing with remediation guidance.
• Architect and drive roadmap for security automation to scale security operations and vulnerability management.
• Design and lead deployment of automation frameworks that integrate security into cloud-native deployment pipelines.
• Identify new vulnerability classes and lead research to stay ahead of evolving threats.
• Deploy advanced controls to maximize observability and harden attack surfaces across the ecosystem.

Skills

Application security

Security architecture

CI/CD security

Go

Python

Java

Job description

IBM Software, including Confluent, seeks a Staff Application Security Engineer to shape security strategy across on-prem and cloud services. You will lead architecture, embed security in the product lifecycle, and partner with Engineering and Product leadership to mitigate risks at scale.

You will design security automation, drive secure-by-design practices, and develop roadmaps for vulnerability management, with hands-on experience in distributed systems and cloud-native deployments.