Staff Application Security Architect

IBM Computing; Bellevue (WA); On-site; USD 180,000 - 240,000; Full time

Job summary

IBM is seeking a Staff Application Security Engineer to shape security architecture for Confluent integrations, spanning on-premises and cloud-native environments. You will lead threat modeling, security design reviews, and automation across CI/CD pipelines, leveraging Go, Python, or Java to build scalable security tooling.

You will partner with Engineering and Product leaders to embed security by design while driving preventative improvements and implementing innovative AI-assisted security

Qualifications

• 10+ years of hands-on application security experience in large-scale distributed systems.
• Strong background in modern web applications and cloud-native platforms.
• Ability to partner with engineering and product leadership to embed security into architecture.
• Experience securing CI/CD pipelines and automated security guardrails.
• Experience with Go, Python, or Java; building scalable security automation frameworks.
• Data-driven decision making and ability to lead cross-functional initiatives.

Responsibilities

• Identify security risks early with cross-functional teams and drive secure-by-design practices.
• Define threat modeling frameworks and lead security design reviews.
• Oversee security code reviews and API security testing with remediation guidance.
• Architect and drive security automation roadmaps and tooling.
• Design deployment automation that integrates security into cloud-native pipelines.
• Lead vulnerability research and tabletop exercises to stay ahead of threats.
• Deploy advanced controls to maximize observability and harden attack surfaces.

Skills

Security architecture

Threat modeling

CI/CD security

Go/Python/Java

Cloud security

Security automation

Cross-functional leadership

Vulnerability management

API security testing

Job description

IBM is seeking a Staff Application Security Engineer to shape security architecture for Confluent integrations, spanning on-premises and cloud-native environments. You will lead threat modeling, security design reviews, and automation across CI/CD pipelines, leveraging Go, Python, or Java to build scalable security tooling.

You will partner with Engineering and Product leaders to embed security by design while driving preventative improvements and implementing innovative AI-assisted security