Staff Application Security Architect – Cloud-Native

IBM; Tucson (AZ); On-site; USD 180,000 - 240,000; Full time

Job summary

IBM Software is seeking a Staff Application Security Engineer to shape security strategy for on-prem and cloud services. You will lead architecture reviews, drive secure-by-design practices, and build automation to scale security across global engineering teams.

The role focuses on evolving the security posture from design through deployment, with emphasis on CI/CD guardrails and proactive risk mitigation. A Master’s degree and 10+ years in security are preferred.

Qualifications

• 10+ years of hands-on application security experience in large-scale distributed systems.
• Strong knowledge of modern web applications and cloud-native platforms; secure design and architecture.
• Ability to partner with engineering and product leadership to embed security into core architecture.
• Experience building security automation and integrating security into CI/CD pipelines.

Responsibilities

• Identify security risks early with engineering teams and drive secure-by-design practices.
• Lead threat modeling and security design reviews for complex distributed systems.
• Oversee security code reviews and API security testing; provide remediation guidance.
• Architect and drive security automation and tooling to scale security operations.

Skills

Security architecture

Threat modeling

CI/CD security

Automation

Go/Python/Java

Education

Master's degree

Tools

Go

Python

Java

Job description

IBM Software is seeking a Staff Application Security Engineer to shape security strategy for on-prem and cloud services. You will lead architecture reviews, drive secure-by-design practices, and build automation to scale security across global engineering teams.

The role focuses on evolving the security posture from design through deployment, with emphasis on CI/CD guardrails and proactive risk mitigation. A Master’s degree and 10+ years in security are preferred.