Staff AppSec Architect: Cloud-Native Security Leader

International Business Machines Corporation; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Confluent is seeking a Staff Application Security Engineer to join our security architects and engineers. You will shape the application security strategy across on-premises products and cloud services, embedding security into the product lifecycle from design to deployment.

You will lead security architecture, drive threat modeling, oversee code reviews and API testing, and build automation that scales security across distributed systems.

Qualifications

• 10+ years of hands-on application security experience in large-scale, distributed systems.
• Strong knowledge of secure software design, architecture, and cloud-native platforms.

Responsibilities

• Identify security risks early and promote secure-by-design practices across the organization.
• Lead security design reviews for complex distributed systems and provide actionable architectural guidance.
• Oversee security code reviews and API security testing with definitive remediation guidance.
• Architect and drive security automation to scale product security operations.
• Design and deploy automation that integrates security into cloud-native deployment pipelines.
• Lead vulnerability research and tabletop exercises to stay ahead of threats.
• Deploy advanced technology controls to maximize observability and harden key attack surfaces.

Skills

Go

Python

Java

Security Architecture

Threat Modeling

CI/CD Security

Cloud-native Security

Leadership

Cross-functional Collaboration

Education

Bachelor's Degree

Master's Degree

Job description

Confluent is seeking a Staff Application Security Engineer to join our security architects and engineers. You will shape the application security strategy across on-premises products and cloud services, embedding security into the product lifecycle from design to deployment.

You will lead security architecture, drive threat modeling, oversee code reviews and API testing, and build automation that scales security across distributed systems.