Application Security Architect (AI-Focused, Foundational)

Quick Facts

• Role: Application Security Architect (AI-focused, foundational)

• Focus: Application security architecture for enterprise apps/APIs/microservices/cloud-native systems plus AI-assisted security workflows

Description

Own and evolve security architecture and controls for enterprise applications, APIs, microservices, and cloud-native systems. Define and improve application security capabilities such as authentication/authorization, API security, encryption, secrets management, and secure configuration, while supporting Secure SDLC and DevSecOps integration. Apply AI-assisted tools and workflows to improve threat modeling, vulnerability assessment, remediation recommendations, and security automation with proper validation and human oversight.

Responsibilities

• Design and implement application security architectures and controls for new implementations, migrations, and security improvements

• Conduct security architecture reviews, threat modeling, secure design assessments, and application security risk analysis

• Build security reference architectures, security standards, secure design patterns, and secure development guidelines

• Support SSDLC and secure-by-design principles; integrate application security into DevSecOps across engineering teams

• Evaluate and improve security tooling/processes including SAST, DAST, SCA, secrets scanning, and vulnerability management

• Collaborate with development, DevOps, cloud/infrastructure, IAM, security operations, and compliance teams to embed security into application design and development

• Integrate security automation and application security tooling into CI/CD pipelines and developer workflows

• Use AI-assisted workflows for threat modeling and security architecture analysis, vulnerability assessment, secure code review support, security requirements/compliance analysis, reporting/documentation, and repetitive workflow automation

• Identify opportunities for AI-assisted automation while ensuring appropriate validation, data protection, and human oversight

• Communicate security risks, architectural decisions, and remediation plans to stakeholders and security leadership

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience

• 5+ years of information security experience focused on application security architecture, secure application design, application security engineering, DevSecOps integration, or application security improvement projects

• Strong hands-on application security skills: vulnerability identification, security risk assessment, and technical security control recommendations; knowledge of OWASP Top 10 and secure coding practices

• Practical experience with application security architecture reviews, threat modeling, secure design assessments, or security risk analysis

• Experience using application security testing tools such as SAST, DAST, SCA, secrets scanning (or similar)

• Knowledge of Secure SDLC, DevSecOps, CI/CD security, and secure-by-design principles; working ability in at least one language (Python, Java, C#, JavaScript/TypeScript, or Go) for code review and risk assessment

• Working knowledge of cloud security, IAM, network security, data protection, and security operations; familiarity with architecture frameworks such as Zero Trust, NIST, ISO 27001, and OWASP guidance

• Familiarity with security automation/scripting and intermediate AI-assisted security tooling (vulnerability analysis, threat modeling/research, prompting, generating/validating scripts/queries, secure recommendations/documentation, and integrating AI workflows)

• Understanding of safe AI usage: data protection, access control, and validation of AI-generated outputs; willingness to develop AI automation skills

• Strong communication and collaboration skills

• Hands-on technical proficiency

Benefits

• Growth programs including career development and mentoring/soft skills/well-being initiatives

• Certification support (Anthropic, Gemini, GCP, Azure, AWS) and English classes

• Stable pay, Employee Stock Purchase Plan (15% discount), and a benefits package (health insurance, multisport, shopping vouchers)

• Referral bonuses up to $2,000

• Hybrid work mode with opportunity to work remotely within Poland and chance to work abroad up to 60 days annually

• Relocation opportunities, plus corporate/social/well-being events and office amenities