Lead Application Security Architect
Jones Lang LaSalle Incorporated2 months ago
Remote, Spain or Barcelona, SpainStaff+
Responsibilities
- Design and maintain application security architecture standards, policies, patterns, reference architectures, and architecture decision records.
- Lead security architecture reviews for new and existing applications using frameworks such as OWASP, NIST, and SANS.
- Integrate zero-trust and defense-in-depth principles into application architectures.
- Define application security requirements and metrics and integrate security into the software development lifecycle and DevSecOps processes.
- Lead threat modeling sessions and provide remediation guidance to development teams.
- Champion secure coding standards and developer security enablement programs.
- Analyze security requirements and design solutions addressing enterprise risk and regulatory compliance obligations.
- Communicate security designs, risk assessments, and remediation recommendations to technical and non-technical stakeholders.
- Coordinate security design reviews and approval processes across security, engineering, and enterprise architecture teams.
- Contribute to the application security strategy roadmap and identify emerging threats.
- Mentor junior security engineers, developers, and architects and lead cross-functional security initiatives.
- Support secure development training and security awareness programs.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Software Engineering, or a related field, or equivalent experience.
- At least 7 years of information security experience focused on application security engineering, secure software development, or security architecture.
- Comprehensive knowledge of application security methodologies, OWASP Top 10, SANS/CWE, secure development frameworks, and security architecture design patterns.
- Experience designing security architectures for AWS, Azure, GCP, microservices, APIs, and containerized workloads.
- Proficiency with DevSecOps tooling and practices including SAST, DAST, SCA, container image scanning, secrets management, and CI/CD security integration.
- Experience with NIST CSF, NIST SP 800-53, ISO 27001, and zero-trust architecture principles.
- Working knowledge of IAM, OAuth 2.0/OIDC, application-layer authentication and authorization controls, cryptography, data protection, encryption, and PKI.
- Familiarity with STRIDE, PASTA, or equivalent threat modeling methodologies.
- Ability to analyze complex application architectures, translate security requirements into implementable solutions, lead security assessments and architecture reviews, and communicate with diverse stakeholders.
- Ability to mentor junior security professionals and developers and balance security rigor with development velocity.
- Knowledge of OWASP GenAI, LLM Top 10, Security Exchange, or AI Exchange is a plus.
- Preferred certifications include CSSLP, CISSP, AWS Security Specialty, Azure Security Specialty, OSCP, or equivalent application security or architecture credentials.
Benefits
- Remote position based in Barcelona, Spain.
- JLL is an equal opportunity employer and provides reasonable accommodations during the employment process.
Tech Stack
Categories
About Jones Lang LaSalle Incorporated
JLL is a global commercial real estate services and investment management firm serving occupiers and investors. It provides property and facilities management, leasing and tenant representation, capital markets, project and development services, workplace strategy, sustainability, and real estate technology and analytics, with a fee- and commission-based advisory, outsourcing, transaction, and management-fee model. Headquartered in Chicago, it is a public company listed on the NYSE (JLL).