Staff Application Security Architect - Cloud & AI

IBM; Lowell (MA); On-site; USD 150,000 - 230,000; Full time

Job summary

IBM Software is seeking a Staff Application Security Engineer to join a security architecture team responsible for shaping security across on-premises products and cloud services. You will lead design decisions, drive security as part of the product lifecycle, and partner with Engineering, Product, and Platform teams to embed security by default in distributed systems.

You will build security automation, run threat modeling, perform code and API security reviews, and advance automated

Qualifications

• 10+ years of hands-on application security experience.
• Security fundamentals applied to modern web apps and cloud-native platforms.
• Embed security into core architecture with leadership.
• Lead investigations and remediation for security incidents.
• Drive security by design through automation and agile practices.

Responsibilities

• Partner with Engineering, Product and Platform teams to identify security risks early and drive secure-by-design practices.
• Define threat modeling frameworks, standardize security design and lead reviews for complex systems.
• Serve as SME for product security reviews, overseeing code, API testing and remediation guidance.
• Architect and drive security automation to scale security operations and vulnerability management.
• Design and deploy automation that integrates security into cloud-native deployment pipelines.
• Proactively identify new vulnerability classes and orchestrate exercises to stay ahead.
• Identify and deploy advanced controls to harden key surfaces across the ecosystem.

Skills

Application security

Security architecture

Cloud security

Threat modeling

CI/CD security

Automation

Go/Python/Java

Leadership

Cross-functional collaboration

Security reviews

Education

Master's Degree

Job description

IBM Software is seeking a Staff Application Security Engineer to join a security architecture team responsible for shaping security across on-premises products and cloud services. You will lead design decisions, drive security as part of the product lifecycle, and partner with Engineering, Product, and Platform teams to embed security by default in distributed systems.

You will build security automation, run threat modeling, perform code and API security reviews, and advance automated