Senior Application Security Architect
State Street1 day ago
Base Salary
$120k - $203k/yr
Responsibilities
- Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging technologies.
- Define and maintain application security and AI security standards, architecture patterns, and security requirements.
- Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions.
- Partner with application development, cloud engineering, AI engineering, cybersecurity, architecture, and data science teams to embed security controls across software and AI development lifecycles.
- Provide expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection.
- Assess risks involving applications, AI models, training data, prompts, agents, integrations, and third-party AI services.
- Drive secure-by-design, Zero Trust, DevSecOps, and AI security practices across the enterprise.
- Evaluate emerging application security and AI security threats, technologies, and industry standards.
- Support application modernization, cloud transformation, DevSecOps, and AI adoption initiatives.
Requirements
- Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
- 14 or more years of experience in application security, software engineering, security architecture, AI security, or related technology disciplines, with at least 8 years of hands-on cybersecurity experience preferred.
- Deep expertise in application security, secure software development, modern application architectures, secure software development lifecycle practices, OWASP Top 10, API security, secure coding, and application security testing.
- Strong understanding of AI/ML security risks, LLMs, Retrieval-Augmented Generation, agentic AI systems, prompt injection, model misuse, AI supply chain security, model security, prompt security, and responsible AI.
- Experience securing cloud-native applications, APIs, microservices, containers, Kubernetes, and AI-enabled platforms across cloud, SaaS, hybrid, and on-premises environments.
- Experience with CI/CD pipelines, DevSecOps practices, Infrastructure as Code, threat modeling, architecture reviews, penetration test remediation, and risk assessments.
- Familiarity with SAST, DAST, IAST, software composition analysis, API security testing, model validation, and AI security assessment techniques.
- Professional certifications such as CISSP, CSSLP, CCSP, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, or AI Security certifications are highly desirable.
- Experience in financial services or other highly regulated industries is preferred.
- Strong analytical, problem-solving, communication, stakeholder management, and cross-functional collaboration abilities.
Benefits
- Hybrid work under State Street’s hybrid work model.
- Standard business hours with flexibility to support global stakeholders across multiple time zones.
- Limited travel may be required based on business needs.
- 401(k) retirement savings plan with company match.
- Medical, dental, vision, life, long-term disability, and other insurance coverage.
- Paid time off, vacation, sick leave, short-term disability, and family care support.
- Employee Assistance Program, incentive compensation eligibility, and certain tax-advantaged savings plans.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
Tech Stack
Categories
About State Street
State Street is a global custodian bank and asset manager serving institutional investors with investment servicing, fund accounting, trading/FX, data, and index/active strategies. Its products include State Street Global Advisors’ funds and ETFs, the Charles River Investment Management Solution, and the front-to-back State Street Alpha platform. Founded in 1792 and headquartered in Boston, the company is publicly traded on the NYSE (ticker: STT) and operates across major markets worldwide.