Application Security Architect (AI)

Quick Facts

• Role: Application Security Architect (AI)
• Focus: Application security architecture for enterprise apps, APIs, microservices, and cloud-native systems, enhanced with AI-assisted security workflows

Description

Design and implement security architectures and controls for application platforms and cloud-native systems. Define and improve application security capabilities (authentication/authorization, API security, encryption, secrets management, secure configuration) and integrate secure development practices across teams. Use AI-assisted tools and workflows to support threat modeling, vulnerability assessment, secure code review, and remediation recommendations—with appropriate validation, data protection, and human oversight.

Responsibilities

• Design and implement security architectures and controls for enterprise applications, APIs, microservices, and cloud-native applications
• Gather business, technical, and compliance requirements for secure solutions across new implementations, migrations, and security improvements
• Define and improve application security capabilities: authentication, authorization, API security, encryption, secrets management, secure configuration
• Conduct security architecture reviews, threat modeling, secure design assessments, and application security risk analysis
• Develop application security reference architectures, security standards, secure design patterns, and secure development guidelines
• Support Secure Software Development Lifecycle (SSDLC), secure-by-design principles, and DevSecOps integration
• Evaluate and improve application security technologies and processes (SAST, DAST, SCA, secrets scanning, vulnerability management)
• Review vulnerabilities, identify architectural weaknesses, and recommend remediation strategies
• Collaborate with development, DevOps, cloud, infrastructure, IAM, security operations, and compliance teams
• Integrate security automation and application security tooling within CI/CD pipelines and developer workflows
• Use AI-assisted tools for threat modeling, security architecture analysis, vulnerability assessment, remediation recommendations, secure code review, and security testing support
• Identify opportunities for AI-assisted application security automation with proper validation, data protection, and human oversight
• Communicate application security risks, architectural decisions, and remediation plans to stakeholders and security leadership

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience focused on application security architecture, secure application design, application security engineering, or DevSecOps/application security improvement projects
• Strong hands-on expertise in application security: vulnerability identification, security risk assessment, and technical security control recommendations
• Understanding of application security principles, OWASP Top 10, secure coding practices, and API security (authentication/authorization)
• Practical experience with application security architecture reviews, threat modeling, secure design assessments, or security risk analysis
• Experience with application security tools such as SAST, DAST, SCA, secrets scanning, or similar security testing solutions
• Knowledge of Secure SDLC, DevSecOps, CI/CD security, secure-by-design; ability to review code in Python, Java, C#, JavaScript/TypeScript, or Go
• Working knowledge of related security domains: cloud security, IAM, network security, data protection, and security operations; familiarity with Zero Trust, NIST, ISO 27001, and OWASP guidelines
• Familiarity with application security automation, scripting, and security tooling integration; intermediate AI-assisted tool experience (vulnerability analysis, threat modeling/research, prompting for technical/security tasks, generating/validating scripts/queries, documentation support, workflow automation, and basic AI workflow/integration configuration)
• Understanding of safe AI usage: data protection, access control, and validation of AI-generated outputs; willingness to further develop AI automation skills
• Strong communication and collaboration skills
• Hands-on technical proficiency

Benefits

• Growth opportunities: career development programs; thought leadership, mentoring, soft skills, and well-being programs; certifications (Anthropic, Gemini, GCP, Azure, AWS); English classes
• Benefits coverage: health insurance, multisport, shopping vouchers; stable pay; Employee Stock Purchase Plan with 15% discount; referral bonuses up to $2,000
• Work model: hybrid by design with opportunity to work remotely within Poland; chance to work abroad up to 60 days annually; business-driven relocation opportunities
• Additional perks: office entertainment/relaxation zones and sports; free snacks and coffee; corporate, social, and well-being events
• Contractor option: B2B cooperation terms are agreed individually