Application Security Architect (AI Foundations)

Quick Facts

Role focus: Application security architecture with AI-assisted (foundational) support.

Description

Design secure application security architectures and controls for enterprise applications, APIs, microservices, and cloud-native systems. Define and improve security capabilities (authentication, authorization, API security, encryption, secrets management, secure configuration), perform security reviews and threat modeling, and integrate security into Secure SDLC and DevSecOps. Use AI-assisted tools and workflows to improve security activities while ensuring validation, data protection, and human oversight.

Responsibilities

• Design and implement security architectures and controls for enterprise applications, APIs, microservices, and cloud-native applications; gather business, technical, and compliance requirements for new builds, migrations, and security improvements.
• Define and improve application security capabilities: authentication, authorization, API security, encryption, secrets management, and secure configuration; conduct security architecture reviews, threat modeling, secure design assessments, and application security risk analysis.
• Develop application security reference architectures, standards, secure design patterns, and secure development guidelines.
• Support Secure Software Development Lifecycle (SSDLC), secure-by-design principles, and DevSecOps integration across engineering teams.
• Evaluate and improve application security technologies and processes, including SAST, DAST, SCA, secrets scanning, and vulnerability management; review vulnerabilities, identify architectural weaknesses, and recommend remediation strategies.
• Collaborate with development, DevOps, cloud, infrastructure, IAM, security operations, and compliance teams to embed security into application design and development.
• Support security automation and integrate application security tooling into CI/CD pipelines and developer workflows.
• Use AI-assisted tools and workflows for threat modeling and security architecture analysis, vulnerability assessment and remediation recommendations, secure code review and security testing support, and security documentation/reporting automation.
• Identify opportunities for AI-assisted security automation while ensuring validation, data protection, and human oversight; communicate risks, architectural decisions, and remediation plans.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• Five-plus years of information security experience in application security architecture, secure application design, or application security engineering, including work on secure development, DevSecOps integration, or application security improvement projects.
• Strong hands-on application security expertise: vulnerability identification, security risk assessment, and technical control recommendations; understanding of application security principles, OWASP Top 10, and secure coding practices.
• Practical experience with application security architecture reviews, threat modeling, secure design assessments, or security risk analysis; experience with SAST, DAST, SCA, secrets scanning, or similar tools.
• Good understanding of Secure SDLC, DevSecOps, CI/CD security, and secure-by-design principles; working knowledge of at least one programming language (Python, Java, C#, JavaScript/TypeScript, or Go) to review code and assess security risks.
• Working knowledge of related security domains (cloud security, IAM, network security, data protection, security operations) and security architecture frameworks such as Zero Trust, NIST, ISO 27001, or OWASP guidelines.
• Familiarity with application security automation, scripting, security tooling integration, and intermediate practical experience with AI-assisted tools (e.g., AI for vulnerability analysis and threat modeling, structured prompting, generating/validating scripts and security documentation, and basic AI workflow/integration configuration).
• Understanding of safe AI usage, including data protection, access control, and validation of AI-generated outputs; willingness to develop AI automation skills further.
• Strong communication and collaboration skills; hands-on technical proficiency.

Benefits

• Hybrid-by-design with opportunity to work remotely within Poland.
• Chance to work abroad up to 60 days annually; business-driven relocation opportunities.
• Career development programs, mentoring and soft skills training, and well-being programs.
• Certification support (Anthropic, Gemini, GCP, Azure, AWS), and English classes.
• Stable pay; Employee Stock Purchase Plan with a 15% discount.
• Benefits package (health insurance, multisport, shopping vouchers), referral bonuses up to $2,000.
• Corporate, social, and well-being events; office amenities (entertainment/relaxation zones, table tennis/football, free snacks and coffee).