Staff Application Security Architect
Rocket Mortgage2 months ago
Base Salary
$149k - $318k/yr
Responsibilities
- Perform application security reviews, formal threat modeling, and source code reviews during design and implementation phases.
- Set strategic direction for application security, shift-left processes, secure coding standards, and secure software development practices.
- Create and evangelize secure application policies, architecture patterns, API security guidance, and authentication and authorization controls.
- Build automated security guardrails, remediations, and continuous security testing into software delivery pipelines.
- Coordinate and scale application security initiatives across AppSec, engineering, product, architecture, audit, and information security teams.
- Align security architectures with compliance, regulatory, and contractual requirements.
- Mentor software engineers and information security team members on threat modeling, secure code design, and vulnerability remediation.
Requirements
- At least 10 years of experience in information security, application development with a secure coding background, or software engineering focused on secure code and design, or a bachelor’s degree in computer science, information security, or a related field plus 5 years of experience.
- Experience performing architectural threat modeling on complex systems using formal frameworks such as STRIDE, DREAD, or PASTA.
- Ability to read, write, and audit code for security vulnerabilities and provide actionable remediation guidance.
- Deep familiarity with the Java ecosystem, as well as .NET and/or Python; proficiency in a scripting language such as PowerShell, Bash, or Python.
- Experience with secure SDLC frameworks, DevSecOps pipeline integration, SAST, DAST, SCA, secret scanning, IAM, container security, OWASP Top 10, ASVS, and MITRE ATT&CK.
- Knowledge of fundamental information security concepts, software supply chain security, development environment hardening, and risk mitigation at scale.
- Ability to use AI-assisted engineering tools critically and validate or correct inaccurate outputs.
- Preferred qualifications include a master’s degree, advanced threat modeling expertise, AppSec program scaling experience, developer security champion program experience, and certifications such as OSCP, OSWE, GWAPT, CISSP, or CCSP.
Benefits
- Eligible team members receive health and wellness benefits, including medical, dental, and vision coverage.
- Benefits include a 401(k) retirement plan, paid time off, annual bonus eligibility, incentives, and other employment-related benefits.
- The role may include an on-call rotation with nights and weekend coverage depending on team needs.
- The posted base compensation range is $149,000.00-$318,000.00 annually.
Tech Stack
Categories
About Rocket Mortgage
Welcome to the NEW Quicken Loans, the cutting-edge online marketplace transforming the way you find financial providers. On November 1, 2023, Quicken Loans came under the control of LMB OpCO, and is now a financial marketplace platform connecting customers with a wide range of services, including mortgages, personal loans, home services, auto loans, and more. Our passion lies in simplifying the process of choosing the perfect solution for your unique financial needs, and we've made it our mission to empower you with the information you need to make confident decisions. NMLS #167283 | NMLS Access: nmlsconsumeraccess.org