Staff AppSec Architect for SaaS & AI Security

Reltio

United States

Hybrid

USD 114,000 - 240,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Reltio invites an experienced Staff Application Security Engineer to define and drive security architecture for a cloud‑native SaaS platform. You will shape secure SDLC strategy, shift‑left automation, and secure adoption of API‑driven and AI‑agentic technologies across a distributed environment.

You will partner with Engineering, DevOps, Product, and Release Management to embed security into design and delivery.

Qualifications

8+ years of experience in application security or software development, including significant time in a cloud‑native or SaaS environment.
Demonstrated technical leadership as a senior individual contributor: setting standards, driving cross‑team initiatives, and influencing architecture without direct authority.
Hands‑on experience with secure coding practices and modern application development; proficiency leading secure code reviews.
Strong understanding of cloud well‑architected frameworks, application development, and deployment workflows.
Strong understanding of application security vulnerabilities (OWASP Top 10) and prevention strategies.
Strong understanding of API security principles and the OWASP API Top 10.
Experience integrating security into CI/CD and release management processes (e.g., Jenkins, ArgoCD, or similar).
Experience with SAST, SCA, and DAST in CI/CD pipelines.
Experience with AI security concepts, including guardrails, prompt and output validation, data protection, and MCP security.
Experience with AWS, GCP, and/or Azure, and securing containerized environments and Kubernetes.
Hands‑on experience with Burp Suite Pro for web and API testing.
Experience with Wiz and other AppSec tools.
Strong communication and presentation skills, with the ability to educate, collaborate, and drive risk‑based consensus.
Self‑starter with a history of driving technical initiatives; adaptable, agile, and effective in global, distributed teams.

Responsibilities

Security Architecture & Technical Leadership: Serve as the senior application security SME, guiding secure design patterns and defense‑in‑depth strategies for the product security architecture.
Drive the overall application/product security architecture, vision, strategy, and roadmap across the platform and services.
Influence engineering architecture and roadmap decisions, driving risk‑based consensus across teams.
Mentor and uplevel application security engineers and development teams, raising secure coding maturity.
Secure Development Lifecycle & Shift‑Left: Embed security throughout the SDLC, define secure coding standards, and adopt best practices.
Drive shift‑left initiatives with tooling, patterns, and remediation support for secure from the outset development.
Design and implement security controls within CI/CD pipelines for automated testing and vulnerability detection at scale.
Operationalize SAST, SCA, DAST and secrets scanning as policy‑driven gates; partner with release management on secure deployment checks.
Lead threat modeling sessions for complex systems to identify and mitigate security risks early.
Perform risk assessments of new tech and communicate risk impact to stakeholders.