Application Security Architect (AI-enabled)

Quick Facts

• Role: Application Security Architect (AI-enabled, foundational level)

Description

Design and implement security architectures and controls for enterprise applications, APIs, microservices, and cloud-native systems. Define and improve application security capabilities (authentication, authorization, API security, encryption, secrets management, and secure configuration) while driving secure-by-design, SSDLC, and DevSecOps integration. Apply AI-assisted tools and workflows to strengthen threat modeling, security architecture analysis, vulnerability assessment, remediation recommendations, and security testing support—under validated, protected, and human-oversight practices.

Responsibilities

• Design and implement secure application solutions across new implementations, migrations, and security improvements

• Perform architecture reviews, threat modeling, secure design assessments, and application security risk analysis

• Build application security reference architectures, standards, secure design patterns, and secure development guidelines

• Support SSDLC, secure-by-design principles, and DevSecOps integration across engineering teams

• Evaluate and improve application security technologies and processes (SAST, DAST, SCA, secrets scanning, vulnerability management)

• Review vulnerabilities, identify architectural weaknesses, and recommend remediation strategies

• Collaborate with development, DevOps, cloud, infrastructure, IAM, security operations, and compliance teams to embed security into design and development

• Integrate security automation and application security tooling into CI/CD pipelines

• Use AI-assisted tools/workflows for threat modeling, security architecture analysis, vulnerability assessment, secure code review, and security testing support

• Identify opportunities for AI-assisted application security automation with appropriate validation, data protection, and human oversight

• Communicate application security risks, architectural decisions, and remediation plans to stakeholders and security leadership

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience

• 5+ years of information security experience focused on application security architecture, secure application design, or application security engineering

• Hands-on application security expertise (vulnerability identification, security risk assessment, and technical control recommendations)

• Experience with application security architecture reviews, threat modeling, secure design assessments, or security risk analysis

• Practical experience with SAST, DAST, SCA, secrets scanning (or similar security testing solutions)

• Knowledge of Secure SDLC, DevSecOps, CI/CD security, and secure-by-design principles; ability to review code in at least one language (Python, Java, C#, JavaScript/TypeScript, or Go)

• Working knowledge of cloud security, IAM, network security, data protection, and security operations; understanding of Zero Trust, NIST, ISO 27001, and/or OWASP guidance

• Familiarity with application security automation, scripting, and AI-assisted tooling/workflows (e.g., AI for vulnerability analysis/threat modeling/research, structured prompting, generating/validating scripts/queries, and AI-assisted documentation)

• Understanding of safe AI usage including data protection, access control, and validation of AI outputs; willingness to further develop AI automation skills

• Strong communication and collaboration skills

• Hands-on technical proficiency

Benefits

• Hybrid-by-design with opportunity to work remotely within Poland

• Opportunity to work abroad up to 60 days annually

• Business-driven relocation opportunities

• Career development programs, mentoring, soft skills and well-being programs

• Certification support (Anthropic, Gemini, GCP, Azure, AWS)

• English classes

• Stable pay; Employee Stock Purchase Plan (15% discount)

• Benefits package (health insurance, MultiSport, shopping vouchers)

• Referral bonuses up to $2,000

• Office amenities (entertainment/relaxation zones, table tennis and football, free snacks/coffee)

• Corporate, social, and well-being events

• Note: benefits apply to employees; contractors possible (B2B terms agreed individually)