Senior Principal AppSec Architect – Cloud, CI/CD & Risk

Quantinuum; Broomfield (CO); On-site; USD 184,000 - 230,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k) with company match

Paid holidays and vacation

Paid parental leave

Equity or stock options

Job summary

Quantinuum seeks a Principal Application Security Architect in Broomfield, CO to lead hands-on security reviews, threat modeling, and targeted testing across web services, APIs, and cloud workloads. You will architect and tune SAST/DAST tooling, and embed security gates in CI/CD to deliver fast, actionable feedback.

You will collaborate with engineering to design secure architectures, translate vulnerabilities into business risks, and stay current with emerging threats and security technologies.

Qualifications

• Bachelor's degree required.
• 10+ years in application security/penetration testing or secure software development.
• 5+ years hands-on software engineering experience.
• U.S. Person as defined by contract requirements (citizenship/permanent resident/green card).
• Security clearance considerations due to national security requirements.

Responsibilities

• Perform manual code reviews to find logic flaws and vulnerabilities.
• Lead threat modeling sessions before coding starts.
• Test web services, APIs, and cloud workloads to verify defenses.
• Architect and tune enterprise SAST/DAST/scanning tools for high-quality results.
• Integrate security gates into CI/CD pipelines for fast feedback.
• Review PRs with engineering to ensure secure fixes.

Skills

OWASP Top 10

SANS CWE

Secure coding practices

Java

Python

JavaScript

Go

Cloud-native security

Education

Bachelor's Degree

Tools

SAST

DAST

CI/CD tooling

Job description

Quantinuum seeks a Principal Application Security Architect in Broomfield, CO to lead hands-on security reviews, threat modeling, and targeted testing across web services, APIs, and cloud workloads. You will architect and tune SAST/DAST tooling, and embed security gates in CI/CD to deliver fast, actionable feedback.

You will collaborate with engineering to design secure architectures, translate vulnerabilities into business risks, and stay current with emerging threats and security technologies.