Staff Application Security Architect

IBM Computing; Rochester (MN); On-site; USD 150,000 - 210,000; Full time

Job summary

IBM Software seeks a Staff Application Security Engineer to join a team shaping the application security strategy for on-prem and cloud services. You will influence architectural direction and embed security across the product lifecycle in a global engineering organization.

The role emphasizes security automation, threat modeling, and collaboration with Engineering and Product leadership. You will lead security reviews and build scalable tooling to advance a proactive security posture.

Qualifications

• 10+ years of hands-on application security experience.
• Strong knowledge of secure software design, web apps and cloud-native platforms.
• Ability to embed security into core architecture and drive secure-by-design practices.
• Experience securing CI/CD pipelines and automation guardrails.
• Proficiency in Go, Python, or Java with security automation experience.

Responsibilities

• Identify security risks early and influence architectural decisions for distributed systems.
• Standardize threat modeling frameworks and lead security design reviews.
• Review product security implementations and provide remediation guidance.
• Develop scalable security automation tooling and integrate into cloud-native pipelines.
• Lead security automation deployments and orchestration frameworks.
• Conduct vulnerability research and tabletop exercises to stay ahead of threats.
• Drive observability and security controls across the ecosystem.

Skills

Application security

Security fundamentals

Cross-functional collaboration

Incident response

CI/CD security

AI/ML in security

Go

Python

Java

Leadership

Data-driven decision making

Job description

IBM Software seeks a Staff Application Security Engineer to join a team shaping the application security strategy for on-prem and cloud services. You will influence architectural direction and embed security across the product lifecycle in a global engineering organization.

The role emphasizes security automation, threat modeling, and collaboration with Engineering and Product leadership. You will lead security reviews and build scalable tooling to advance a proactive security posture.