Application Security Architect, Cybersecurity

About the role

We are looking for a hands-on **Application Security Architect** who combines strong software engineering skills with deep application security expertise. This is a generalist role — you should be comfortable reading and writing production-quality code across multiple languages, and equally comfortable designing and running an AppSec program that spans SAST, DAST, and SCA tooling, secure architecture reviews, and developer enablement.

What you'll do

• Design and drive the application security strategy across the SDLC — from design reviews through CI/CD to production
• Own and continuously tune **SAST** (e.g., Checkmarx, Fortify, Semgrep, CodeQL), **DAST** (e.g., Burp Suite Enterprise, OWASP ZAP, Invicti), and **SCA** (e.g., Snyk
• Perform secure architecture and design reviews for new features, services, and major system changes
• Read, write, and refactor code (not just review it) to build internal tooling, PoCs for vulnerabilities, custom scanners, and secure-by-default libraries/frameworks
• Conduct manual code reviews and threat modeling for high-risk services, complementing automated tooling

What you need

• 12–22 yrs of experience
• OWASP
• ISO 27001
• Python
• CI/CD
• Node.js
• C#
• Any graduate

Good to have

• Cloud security
• AWS
• GCP
• Docker
• Kubernetes
• Azure