Senior SSDLC Security Architect – Hybrid/VA

Dia Software Solutions; Richmond (VA); Hybrid; USD 130,000 - 170,000; Full time

Job summary

DIA SOFTWARE SOLUTIONS LLC is seeking a Senior Application Security Architect for a hybrid role in Virginia. You will lead SSDLC security across web, cloud-native, GIS, and AI solutions, shaping data-protection strategies and security patterns.

Work with engineering and cybersecurity teams to perform threat modeling, set encryption and access-control standards, and guide secure deployments in Azure, Kubernetes, and on-prem environments.

Qualifications

• 10+ years in software engineering or security roles with 2+ years designing security architecture.
• Bachelor’s degree in CS/Cybersecurity/Engineering or equivalent.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Experience with SSDLC, threat modeling, and architecture reviews.
• Experience securing APIs, web apps, cloud platforms, and CI/CD pipelines.

Responsibilities

• Define security architecture principles, standards, patterns and guardrails for web, mobile, API, microservices and cloud-native systems.
• Perform design reviews, identify trust boundaries, data flows, security gaps and controls.
• Lead threat modeling for new apps and major features.
• Establish requirements for authentication, encryption, access controls, and data protection.
• Integrate security into SDLC with CI/CD, IaC, testing and production monitoring.
• Guide security tooling usage (SAST/DAST, SCA, container scans).

Skills

Threat modeling

Security architecture reviews

Secure SDLC integration

API security

Container security

Cloud security

Identity & access management

Encryption

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

SAST

DAST

Software composition analysis

Container/image scanning

Kubernetes

Microsoft Purview

DLP rules

Job description

DIA SOFTWARE SOLUTIONS LLC is seeking a Senior Application Security Architect for a hybrid role in Virginia. You will lead SSDLC security across web, cloud-native, GIS, and AI solutions, shaping data-protection strategies and security patterns.

Work with engineering and cybersecurity teams to perform threat modeling, set encryption and access-control standards, and guide secure deployments in Azure, Kubernetes, and on-prem environments.