Application Security Architect, Information Technology
ServiceLink2 years ago
Plano, TX, USASenior
Responsibilities
- Build and publish production-ready application security reference architectures, reusable templates, and secure patterns for .NET, Python, and SPA services.
- Lead threat modeling, secure design reviews, architecture decisions, and remediation planning for new and materially changed services.
- Own RBAC, authorization, endpoint-to-data classification, least-privilege mapping, and managed-identity architecture for SQL, Cosmos DB, and service-to-service communication.
- Implement container and Kubernetes hardening, including image trust, patch cadence, network controls, and egress guardrails.
- Evaluate and tune SAST, SCA, DAST, IaC, container, and secret-scanning controls against production codebases and deployment patterns.
- Define AI/LLM security guardrails covering prompt-injection defenses, model and data access controls, and safe engineering practices.
- Define risk-based security gates in Azure DevOps and partner with engineering on exception handling, regression checks, and durable fixes.
- Lead chaos engineering exercises to validate security and resilience controls under failure and attack scenarios.
- Mentor engineers and junior security staff through design pairing, code review, and incident retrospectives.
- Present architecture decisions, risks, remediation progress, and security metrics to technical and executive stakeholders.
- Deliver the first-90-day target-state architecture, two secure reference implementations, a tier-1 threat-model workflow, security scorecards, and a toolchain assessment.
Requirements
- At least 7 years of experience in application security, security engineering, or software engineering with significant security architecture ownership.
- Proven experience delivering in cloud-native Azure environments, including AKS, App Services, Entra ID, and Managed Identities.
- Deep experience with microservice and API security, authentication and authorization, secrets management, and data protection.
- Strong practical threat-modeling and secure design-review experience tied to shipped outcomes.
- Hands-on experience integrating security controls into CI/CD workflows, with Azure DevOps preferred.
- Ability to code and review implementation quality in at least one major backend stack, preferably .NET or Python.
- Demonstrated ability to drive cross-team adoption, resolve trade-offs, and deliver under business constraints.
- Preferred experience includes financial services or similarly regulated environments, Kubernetes network-policy and runtime hardening, security metrics and engineering SLA programs, and collaboration with offensive security and incident-response teams.
Benefits
- Hybrid work arrangement requiring at least three days per week in the Plano, Texas office.
- Candidates must live within reasonable commuting distance of the Plano office.
- Applicants must be currently authorized to work full-time in the United States and must not require employment-visa sponsorship now or in the future.
Tech Stack
Categories
About ServiceLink
ServiceLink provides mortgage services and technology to U.S. lenders, originators, and servicers, including property valuation, title and closing, flood certification, subservicing, default management, and auction solutions. The company earns fees for transaction processing and servicing support delivered through its platforms and nationwide vendor networks. It is headquartered in Moon Township, Pennsylvania, and is privately held under ownership of THL (Thomas H. Lee Partners).