[Hiring] Application Security Architect @Axiom Path

Role Description

Join a global financial services organization focused on strengthening its cybersecurity capabilities and modernizing enterprise technology. Operating across the Americas, Europe, and Asia-Pacific, the organization supports complex banking operations where secure application architecture, regulatory compliance, and operational resilience are essential. This opportunity sits within a global Engineering & Automation transformation initiative, bringing together:

• Security architects
• Engineers
• Technology operations
• Risk and compliance professionals
• Regional security leaders

The team is focused on translating security strategies into practical engineering solutions, improving application protection, and establishing sustainable security controls across interconnected systems.

What's In Store For You:

• 100% Remote Opportunity – United States Only
• Engagement: W2 only (no C2C/1099)
• Contract opportunity supporting a global enterprise security transformation program
• Collaborate with international security, engineering, and technology teams across multiple regions
• Work on modern API security, identity management, and application protection initiatives
• Contribute to security architecture decisions, technical implementations, and operational improvements in a highly regulated financial services environment

Qualifications

• 5–7 years of relevant experience in application security, security engineering, API security, or security architecture
• Strong hands-on experience implementing OAuth 2.0, OpenID Connect, JWT authentication, scopes, claims, and secure authorization controls
• Demonstrated expertise securing REST APIs and managing API gateway security configurations
• Experience configuring API security policies, rate limiting, request validation, and traffic protection mechanisms
• Strong understanding of OWASP API Security Top 10 vulnerabilities and practical mitigation techniques
• Experience identifying and addressing injection vulnerabilities, credential stuffing, broken authentication, and excessive authorization
• Hands-on experience working with Web Application Firewalls and collaborating with engineering teams to optimize security protections
• Familiarity with behavioral anomaly detection and runtime application security monitoring
• Ability to assess existing security designs, recommend improvements, and support implementation through operational adoption
• Strong communication and cross-functional collaboration skills, particularly when working with distributed engineering and security teams
• Ability to balance technical security requirements with application functionality, performance, and business needs
• Experience in financial services or other regulated enterprise environments is advantageous

Requirements

• Design and strengthen application security architectures supporting enterprise applications, APIs, and interconnected technology platforms
• Implement secure authentication and authorization patterns using OAuth 2.0, OpenID Connect (OIDC), JSON Web Tokens (JWT), scopes, and claims
• Assess and improve API authorization controls to prevent excessive permissions, unauthorized access, and token misuse
• Configure and optimize API gateway security controls, including rate limiting, request validation, authentication enforcement, and traffic management
• Identify and mitigate application and API vulnerabilities, including OWASP API Security Top 10 risks, injection attacks, credential stuffing, and broken authorization
• Partner with engineering teams to improve Web Application Firewall (WAF) configurations, security rules, and behavioral anomaly detection capabilities
• Translate security assessments and architecture recommendations into actionable engineering changes, implementation decisions, and measurable improvements
• Collaborate with security operations, compliance, privacy, risk, and technology stakeholders to align security controls with enterprise requirements
• Support technical documentation, implementation evidence, and operational handoffs to ensure security improvements remain effective over time