[Hiring] Lead Application Security Architect @JLL

Role Description

At JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced. The Application Security Architect is a senior individual contributor responsible for bridging application security engineering and enterprise security architecture at JLL.

This role designs and owns security architectures for application ecosystems, integrates security into the software development lifecycle (SDLC), and serves as a technical authority on secure design patterns, threat modeling, and DevSecOps practices. Operating at the Senior level, this position independently leads application security initiatives, mentors junior engineers and developers, and partners across engineering, architecture, and business teams to reduce risk and enable secure digital transformation.

If you’re a strategic thinker with application security expertise who thrives in a large, dynamic environment and wants their work to have real, visible impact, we want to hear from you.

Qualifications

• Comprehensive knowledge of application security methodologies, including OWASP Top 10, SANS/CWE, secure development frameworks, and security architecture design patterns.
• Demonstrated experience designing security architectures for cloud-native environments (AWS, Azure, GCP), microservices, APIs, and containerized workloads.
• Strong proficiency in DevSecOps practices and tooling: SAST, DAST, SCA, container image scanning, secrets management, and CI/CD security integration.
• Experience with enterprise security frameworks including NIST CSF, NIST SP 800-53, ISO 27001, and zero-trust architecture principles.
• Working knowledge of identity and access management (IAM), OAuth 2.0/OIDC, and application-layer authentication and authorization controls.
• Understanding of cryptography, data protection, encryption, and Public Key Infrastructure.
• Familiarity with threat modeling methodologies (STRIDE, PASTA, or equivalent) and their application to complex distributed application architectures.
• Knowledge of OWASP: GenAi, LLM Top 10, Security Exchange, Ai Exchange a plus.

Requirements

• Ability to analyze complex application architectures and translate security requirements into practical, implementable design solutions.
• Strong communication skills with the ability to convey technical security risks and architectural recommendations to diverse stakeholders including development teams, business leaders, and enterprise architects.
• Demonstrated ability to lead security assessments, architecture reviews, and cross-functional security initiatives independently.
• Proven capability to mentor and guide junior security professionals and developers on secure design practices and security engineering standards.
• Analytical and problem-solving skills applied to sophisticated security integration challenges with enterprise-wide implications.
• Ability to balance security rigor with development velocity, enabling secure delivery of digital applications and services.

Benefits

• Remote work opportunity.
• Encouragement to apply even if not meeting all requirements.
• Utilization of AI to match candidates with opportunities.