Application Security Architect (AI-enabled)

Quick Facts

• Role: Application Security Architect (AI-enabled), foundational level
• Focus: Application security architecture and secure-by-design/DevSecOps practices, enhanced with AI-assisted security workflows

Description

Every application must earn trust when data and decisions depend on it. In this role, you shape how security architecture supports enterprise application growth and resilience across implementations, migrations, and security improvements. You’ll design security architectures for enterprise apps, APIs, microservices, and cloud-native systems—and apply AI-assisted tooling to improve threat modeling, vulnerability assessment, and remediation recommendations with proper validation, data protection, and human oversight.

Responsibilities

• Design and implement security architectures and controls for enterprise applications, APIs, microservices, and cloud-native applications based on business, technical, and compliance requirements
• Define and improve application security capabilities (authentication, authorization, API security, encryption, secrets management, secure configuration) and perform security architecture reviews, threat modeling, secure design assessments, and security risk analysis
• Develop security reference architectures, security standards, secure design patterns, and secure development guidelines
• Support Secure SDLC, secure-by-design principles, and DevSecOps integration across engineering teams
• Evaluate and improve security technologies and processes: SAST, DAST, SCA, secrets scanning, vulnerability management; review vulnerabilities and recommend remediation strategies
• Collaborate with development, DevOps, cloud, infrastructure, IAM, security operations, and compliance teams to integrate security into application design and development
• Support security automation and application security tooling integration within CI/CD pipelines
• Use AI-assisted tools and workflows for threat modeling and security architecture analysis, vulnerability assessment and remediation recommendations, and secure code review/testing support
• Identify AI-assisted automation opportunities with validation, data protection, and human oversight; communicate security risks, architectural decisions, and remediation plans

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience focused on application security architecture, secure application design, or application security engineering
• Hands-on application security expertise (vulnerability identification, security risk assessment, and recommending technical controls)
• Experience with application security architecture reviews, threat modeling, secure design assessments, or security risk analysis
• Experience with application security tools such as SAST, DAST, SCA, secrets scanning (or similar)
• Working knowledge of Secure SDLC, DevSecOps, CI/CD security, and secure-by-design principles; ability to review code in at least one language (Python, Java, C#, JavaScript/TypeScript, or Go)
• Knowledge of related security domains (cloud security, IAM, network security, data protection, security operations) and familiarity with Zero Trust and frameworks such as NIST, ISO 27001, or OWASP
• Familiarity with security automation/scripting and intermediate practical experience with AI-assisted tools and automation (AI for vulnerability analysis, threat modeling/research, structured prompting, generating/testing scripts/queries, AI-assisted secure code recommendations and documentation)
• Understanding of safe AI usage, including data protection, access control, and validation of AI-generated outputs
• Strong communication and collaboration skills
• Hands-on technical proficiency

Nice to have

• Experience with application security platforms: Snyk, Checkmarx, Veracode, SonarQube, Semgrep, GitHub Advanced Security, Burp Suite, OWASP ZAP
• Threat modeling tools/methods: STRIDE, OWASP Threat Dragon, Microsoft Threat Modeling Tool; CI/CD and DevSecOps security automation
• Software supply chain security (SBOM, dependency management, third-party component security)
• Integration with SIEM/SOAR, ticketing, or vulnerability management; AI automation/agents and platforms such as Copilot Studio, Azure OpenAI, Amazon Bedrock, LangChain, Power Automate
• Knowledge of AI security risks (prompt injection, data leakage, insecure output handling, excessive agent permissions) and OWASP Top 10 for LLM Applications
• Security and AI certifications (e.g., CISSP, OSCP, AI-900, AWS Certified AI Practitioner)

Benefits

• Hybrid-by-design with remote work opportunities in Poland; chance to work abroad up to 60 days annually; possible business-driven relocation
• Career development, mentoring, soft skills and well-being programs
• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes
• Stable pay, Employee Stock Purchase Plan (15% discount), health insurance and other benefits (MultiSport, shopping vouchers)
• Referral bonuses up to $2,000; office perks (entertainment/relaxation zones, table tennis/football, free snacks and coffee)
• Corporate, social and well-being events
• Note: Benefits listed are for employees only; contractor (B2B) cooperation is available under individually agreed terms