[Hiring] Security Architect @Appspace

Role Description

We’re looking for a Security Architect with a passion for securing Artificial Intelligence platforms, AI-driven code analysis, MCP security testing, promoting OWASP Top-Ten testing standards and supporting the Security Engineering program through the Software Application Maturity Model. A proven history of leading complex security transformations. This is a hands-on, deeply technical role, not an advisory position, ideal for someone who thrives at the intersection of engineering, security and client engagement.

• Lead and execute security transformation initiatives for enterprise clients, focusing on AI security, cloud security, application security, and vulnerability management.
• Proficiency in writing code, scripting and automation (e.g., Python, PowerShell, Bash) to streamline investigations.
• Serve as a primary client-facing security expert, building strong relationships and effectively communicating complex technical concepts to both technical and non-technical stakeholders.
• Architect, design, and implement robust security solutions for cloud-native and traditional applications, with a strong emphasis on GCP and Azure.
• Conduct in-depth security assessments, red-team assessments, penetration tests, and code reviews to identify vulnerabilities and recommend remediation strategies.
• Collaborate with the engineering team to develop and implement secure software development lifecycles (SSDLC), integrating security best practices throughout the entire development process.
• Provide expert guidance on OWASP Top 10 vulnerabilities, secure coding practices, and threat modeling.
• Drive the adoption of automated security testing tools and processes.
• The candidate will be available on occasional nights and weekends to support the Security Operations team and will be on-call in the event of any security incident.
• Mentor and provide technical leadership to other security engineers and client teams.
• Stay abreast of the latest security trends, threats, and technologies, continuously enhancing our service offerings.

Qualifications

• Bachelor’s degree in Computer Science, Cyber Security, Risk Management, or a related field (Nice to have).
• 10+ years of experience in information security, including penetration testing, red-team testing, offensive security and exploitation attacks.
• Understanding OWASP, SAMMs and ISO frameworks as it relates to secure software development practices.
• Deep expertise in network and infrastructure security within major cloud platforms, including IAM, network configuration, and cloud-native security tools.
• Hands-on experience with vulnerability management, penetration testing, and common attack vectors; familiarity with SAST, DAST, and SCA tools.
• Strong understanding of the OWASP Top 10, secure coding principles, cryptography, and threat modeling.
• Experience testing and reviewing AI models and platforms and testing against the OWASP LLM Top 10.
• Exceptional communication and interpersonal skills; able to influence and collaborate across technical and non-technical teams.
• Certifications such as OSCP, OSWE, CISSP or cloud-specific credentials.
• Demonstrated ability to thrive in a dynamic, fast-paced, and client-focused environment.
• Happy to work nights and weekends to support engineering and security initiatives when needed.

Requirements

• Certifications such as OSCP, OSWE, CISSP or cloud-specific credentials (e.g., Google Cloud Security Engineer, Azure Security Engineer, AWS Security Specialty).
• Experience with Infrastructure-as-Code (IaC) tools like Terraform, CloudFormation, or ARM templates to automate security controls.
• Familiarity with container security and orchestration (Docker, Kubernetes).
• Knowledge of DevSecOps principles and integrating security into CI/CD pipelines.

Benefits

• 20 Days PTO
• Flexible work schedules
• Remote work opportunities
• Paid company holidays
• Appspace Quiet Fridays (No non-essential internal meetings scheduled)
• A casual dress work environment