Senior Cloud-Native App Security Architect

IBM; Tucson (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

IBM Software is building AI-enabled, cloud-native products and shaping the future of business. IBM seeks a Staff Application Security Engineer to lead security architecture, threat modeling, and automation across on-prem and cloud platforms.

You will partner with Engineering and Product leadership to embed security by design and drive proactive risk mitigation across distributed systems. You will define secure design standards, oversee reviews, and guide remediation.

Qualifications

• 10+ years of hands-on application security experience in large-scale, distributed systems.
• Deep knowledge of security fundamentals for modern web apps and cloud-native platforms.
• Experience embedding security into core architecture and CI/CD pipelines.
• Proven ability to lead security reviews, threat modeling, and automation initiatives.
• Experience with Go, Python, or Java and building scalable security tooling.

Responsibilities

• Partner with Engineering and Product to identify security risks early and drive secure-by-design practices.
• Define threat modeling frameworks and lead security design reviews for complex systems.
• Oversee security code reviews, API security testing, and provide remediation guidance.
• Architect and drive security automation and tooling to scale security operations.
• Design deployment of automation that integrates security into cloud-native pipelines.
• Identify new vulnerability classes, lead research, and coordinate tabletop exercises.
• Raise the organization’s security bar through architectural reviews and guidance.

Skills

Application security

Security architecture

Secure coding practices

CI/CD security

Security automation

Threat modeling

Go/Python/Java

Cross-functional leadership

AI/LLMs in security

Job description

IBM Software is building AI-enabled, cloud-native products and shaping the future of business. IBM seeks a Staff Application Security Engineer to lead security architecture, threat modeling, and automation across on-prem and cloud platforms.

You will partner with Engineering and Product leadership to embed security by design and drive proactive risk mitigation across distributed systems. You will define secure design standards, oversee reviews, and guide remediation.