Strategic Application Security Architect: SSDLC & Cloud

V.L.S. Systems, Inc

Richmond (VA)

Hybrid

USD 140,000 - 180,000

Full time

10 days ago

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

V.L.S. Systems, Inc. is seeking an experienced Application Security Architect in Richmond, VA, offering a hybrid work model.

The role focuses on defining security architecture across web, API, and cloud-native systems, leading threat modeling, and embedding security in the SDLC, with a strong emphasis on data protection and regulatory compliance. The ideal candidate brings 10+ years in related roles, deep knowledge of OWASP risks, IAM patterns, and experience with Azure, SQL Server, Power

Qualifications

Bachelor's degree or equivalent practical experience.
10+ years in software engineering, application security, or related roles.
2+ years designing security architecture for systems.

Responsibilities

Define application-security architecture principles, standards, patterns, and guardrails for web, mobile, API, microservice, and cloud-native systems.
Lead threat modeling for new applications, features, integrations, and high-risk changes.
Establish repeatable security requirements for authentication, authorization, session management, encryption, and data protection.
Partner with engineers to integrate security throughout the SDLC, including CI/CD and IaC.
Evaluate security tools (SAST, DAST, SCA, container scanning, API security testing) and guide usage.
Define vulnerability-management approach for applications and dependencies with SLAs.
Assess third-party libraries, open-source components, and vendor-provided security risk.
Design IAM patterns (MFA/SSO, RBAC/ABAC) and secure hosting environments (Kubernetes, serverless, containers).
Advise incident-response on app-layer threats and contribute to post-incident improvements.