Senior GenAI & Cloud Security Architect

SIDRAM TECHNOLOGIES; New York (NY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

S&P Global seeks an Application Security Architect to secure enterprise applications, APIs, microservices, and AI-powered apps. You will design security architectures, perform threat modeling, and weave security into SDLC and CI/CD with SAST/DAST/SCA, aligning with OWASP Top 10 and API security standards.

The role covers cloud-native security across AWS/GCP, Kubernetes, and containers, plus IAM and policy-as-code. Strong collaboration with engineering and security teams is required.

Qualifications

• 12+ years in Application Security / Security Architecture.
• Experience with OWASP, Threat Modeling, secure SDLC, API Security.
• Hands-on with SAST/DAST/SCA in SDLC pipelines.
• Strong knowledge of AWS/GCP, Kubernetes and container security.
• Understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC.
• GenAI/LLM, RAG, AI security, and prompt safety concepts.

Responsibilities

• Design and implement security architecture for applications, APIs and microservices.
• Lead threat modeling, security reviews and vulnerability assessments.
• Embed security into SDLC and CI/CD pipelines using SAST/DAST/SCA.
• Drive secure coding practices aligned with API security and OWASP Top 10.
• Secure cloud-native apps across AWS/GCP with Kubernetes and containers.
• Define security controls for GenAI, LLM, RAG and AI-enabled apps.
• Implement IAM, authentication, authorization, encryption and policy-as-code.
• Collaborate with engineering and security teams to drive security-by-design.

Skills

Application Security

Threat Modeling

Secure SDLC

API Security

SAST/DAST/SCA

GenAI/LLM Security

IAM / Access Control

OAuth2 / OIDC / JWT

Cloud Security (AWS/GCP)

Kubernetes / Containers

CI/CD / Terraform

Threat Intelligence & AI Security

Tools

AWS

GCP

Kubernetes

Docker

CI/CD

Terraform

Job description

S&P Global seeks an Application Security Architect to secure enterprise applications, APIs, microservices, and AI-powered apps. You will design security architectures, perform threat modeling, and weave security into SDLC and CI/CD with SAST/DAST/SCA, aligning with OWASP Top 10 and API security standards.

The role covers cloud-native security across AWS/GCP, Kubernetes, and containers, plus IAM and policy-as-code. Strong collaboration with engineering and security teams is required.