Senior Application Security Architect
State Street · Berwyn, PA · 1 mo ago
$120k–$203k/yrFull-time
We need to output HTML fragment with sections: About the role? Actually the posting includes "Who We Are Looking For", "Why This Role Is Important To Us", "What You Will Be Responsible For", "What We Value", "Education & Preferred Qualifications", "Additional Requirements", "Work Requirement", "Salary Range", "Benefits", "About State Street". Also "Job ID" etc to be omitted.
We must use for section headings. Use
for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We must not repeat job title as heading. Do not put Job ID as heading. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. So we need to strip out the "About State Street" maybe keep? It's substantive? It's about company description; could keep as a section maybe "About the Company". But we need to only include sections when posting has real specific content. The "About State Street" is generic but still content. It's okay.
We need to preserve all substantive information. So we need to include details like responsibilities list, values list, education & qualifications list, additional requirements, work requirement (hybrid, shift), salary range, benefits list.
We must not create sections with filler like "commensurate with experience". Not present.
We need to decide headings: Could use "About the Role" (maybe from "Who We Are Looking For" and "Why This Role Is Important To Us") but we can combine? The instruction: use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map content to those headings where appropriate.
We have:
- Who We Are Looking For: description of role. Could be "About the role".
- Why This Role Is Important To Us: maybe also part of About the role. Could combine.
- What You Will Be Responsible For: Responsibilities.
- What We Value: could be Skills or Qualifications? It lists skills/qualities. Could be "Skills".
- Education & Preferred Qualifications: Qualifications.
- Additional Requirements: maybe also Requirements.
- Work Requirement: could be Schedule (Hybrid, Shift). Also could be "Schedule".
- Salary Range: Pay.
- Benefits: Benefits.
- About State Street: maybe "About the Company". Not in list but could be okay as a section? The instruction says use those examples but not limited? It says use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can use those headings; we could also add "About the Company" if needed but better to stick to given examples. Could incorporate About State Street into "About the role" maybe? But it's about company, not role. Might be okay to include as a separate section with heading "About the Company". The instruction didn't forbid other headings, just gave examples. Safer to include it as a section with About the Company
.
We must not repeat job title as heading. So no heading "Senior Application Security Architect".
We must not put Job ID as heading.
We need to output only HTML fragment.
Let's extract content.
**Who We Are Looking For** paragraph: "We are looking for a Senior Application Security Architect. You will be responsible for designing, reviewing, and governing security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will partner with software engineering, data science, cloud engineering, cybersecurity, and business teams to ensure security is embedded throughout the software and AI development lifecycles."
**Why This Role Is Important To Us**: "The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's applications, AI capabilities, data, and digital platforms. As applications increasingly leverage AI and machine learning technologies, this role is responsible for ensuring secure-by-design principles are applied consistently across traditional applications, cloud-native services, APIs, and AI-powered solutions."
Combine into About the role paragraph(s). Could be two paragraphs.
**What You Will Be Responsible For**: list bullet points after colon. Let's extract each bullet:
- Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging technologies.
- Define and maintain application security and AI security standards, architecture patterns, and security requirements.
- Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions.
- Partner with application development, cloud engineering, AI engineering, and cybersecurity teams to embed security controls throughout the software and AI development lifecycles.
- Provide subject matter expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection.
- Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third-party AI services.
- Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise.
- Evaluate emerging application security and AI security threats, technologies, and industry standards.
**What We Value**: list bullet points:
- Deep expertise in application security, secure software development, and modern application architectures.
- Strong understanding of AI/ML security risks, Large Language Models (LLMs), agentic AI systems, prompt injection, model misuse, and AI supply chain security.
- Experience securing cloud-native applications, APIs, microservices, containers, Kubernetes, and AI-enabled platforms.
- Strong analytical, problem-solving, and risk assessment skills with the ability to evaluate both traditional and AI-specific security threats.
- Strong communication and stakeholder management skills with the ability to collaborate across architecture, engineering, cybersecurity, cloud, and data science teams.
**Education & Preferred Qualifications**: list bullet points:
- Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
- 14 years or more of experience in application security, software engineering, security architecture, AI security, or related technology disciplines with at least 8 years of hands-on cybersecurity experience preferred.
- Demonstrated experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid, and on-premises environments.
- Deep expertise in secure software development lifecycle (SSDLC), OWASP Top 10, API security, secure coding practices, and application security testing methodologies.
- Strong understanding of AI/ML architectures, LLMs, Retrieval-Augmented Generation (RAG), agentic systems, model security, prompt security, and responsible AI principles.
- Experience with cloud-native technologies, containers, Kubernetes, CI/CD pipelines, DevSecOps practices, and Infrastructure as Code (IaC).
- Experience conducting threat modeling, architecture reviews, penetration test remediation, and risk assessments for applications and AI-enabled solutions.
- Familiarity with SAST, DAST, IAST, software composition analysis (SCA), API security testing, model validation, and AI security assessment techniques.
- Professional certifications such as CISSP, CSSLP, CCSP, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, AI Security, or equivalent certifications are highly desirable.
- Experience within financial services or other highly regulated industries is preferred.
**Additional Requirements**: list bullet points:
- Experience supporting enterprise application modernization, cloud transformation, DevSecOps, and AI adoption initiatives.
- Ability to work effectively with application development, AI engineering, cloud engineering, architecture, and cybersecurity teams in a global environment.
- Limited travel may be required based on business needs.
**Work Requirement**: two sentences:
- Hybrid: Expected to work in accordance with State Street's hybrid work model.
- Shift: Standard business hours with flexibility to support global stakeholders across multiple time zones.
**Salary Range**: "$120,000 - $202,500 Annual The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ."
We can put as paragraph.
**Benefits**: paragraph describing benefits list. It includes: retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); eligibility for certain tax advantaged savings plans. Also link.
We could make a - list of benefits.
**About State Street**: paragraph(s). Could be kept as prose.
Now we need to strip boilerplate: The "About State Street" includes some generic but okay. Also there is "As an Equal Opportunity Employer..." etc which is boilerplate EEO; we must remove that. Also "Discover more information on jobs at StateStreet.com/careers Read our CEO Statement Job Application Disclosure It is unlawful in Massachusetts..." etc. Remove all that.
Also "Job ID: R-793885" remove.
Now produce HTML.
Structure:
About the role
We are looking for a Senior Application Security Architect. You will be responsible for designing, reviewing, and governing security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will partner with software engineering, data science, cloud engineering, cybersecurity, and business teams to ensure security is embedded throughout the software and AI development lifecycles.
The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's applications, AI capabilities, data, and digital platforms. As applications increasingly leverage AI and machine learning technologies, this role is responsible for ensuring secure-by-design principles are applied consistently across traditional applications, cloud-native services, APIs, and AI-powered solutions.
Responsibilities
- Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging technologies.
- Define and maintain application security and AI security standards, architecture patterns, and security requirements.
- Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions.
- Partner with application development, cloud engineering, AI engineering, and cybersecurity teams to embed security controls throughout the software and AI development lifecycles.
- Provide subject matter expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection.
- Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third-party AI services.
- Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise.
- Evaluate emerging application security and AI security threats, technologies, and industry standards.
Skills
- Deep expertise in application security, secure software development, and modern application architectures.
- Strong understanding of AI/ML security risks, Large Language Models (LLMs), agentic AI systems, prompt injection, model misuse, and AI supply chain security.
- Experience securing cloud-native applications, APIs, microservices, containers, Kubernetes, and AI-enabled platforms.
- Strong analytical, problem-solving, and risk assessment skills with the ability to evaluate both traditional and AI-specific security threats.
- Strong communication and stakeholder management skills with the ability to collaborate across architecture, engineering, cybersecurity, cloud, and data science teams.
Qualifications
- Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
- 14 years or more of experience in application security, software engineering, security architecture, AI security, or related technology disciplines with at least 8 years of hands-on cybersecurity experience preferred.
- Demonstrated experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid,
for prose. We must not repeat job title as heading. Do not put Job ID as heading. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. So we need to strip out the "About State Street" maybe keep? It's substantive? It's about company description; could keep as a section maybe "About the Company". But we need to only include sections when posting has real specific content. The "About State Street" is generic but still content. It's okay. We need to preserve all substantive information. So we need to include details like responsibilities list, values list, education & qualifications list, additional requirements, work requirement (hybrid, shift), salary range, benefits list. We must not create sections with filler like "commensurate with experience". Not present. We need to decide headings: Could use "About the Role" (maybe from "Who We Are Looking For" and "Why This Role Is Important To Us") but we can combine? The instruction: use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map content to those headings where appropriate.
We have:
- Who We Are Looking For: description of role. Could be "About the role".
- Why This Role Is Important To Us: maybe also part of About the role. Could combine.
- What You Will Be Responsible For: Responsibilities.
- What We Value: could be Skills or Qualifications? It lists skills/qualities. Could be "Skills".
- Education & Preferred Qualifications: Qualifications.
- Additional Requirements: maybe also Requirements.
- Work Requirement: could be Schedule (Hybrid, Shift). Also could be "Schedule".
- Salary Range: Pay.
- Benefits: Benefits.
- About State Street: maybe "About the Company". Not in list but could be okay as a section? The instruction says use those examples but not limited? It says use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can use those headings; we could also add "About the Company" if needed but better to stick to given examples. Could incorporate About State Street into "About the role" maybe? But it's about company, not role. Might be okay to include as a separate section with heading "About the Company". The instruction didn't forbid other headings, just gave examples. Safer to include it as a section with About the Company
.
We must not repeat job title as heading. So no heading "Senior Application Security Architect".
We must not put Job ID as heading.
We need to output only HTML fragment.
Let's extract content.
**Who We Are Looking For** paragraph: "We are looking for a Senior Application Security Architect. You will be responsible for designing, reviewing, and governing security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will partner with software engineering, data science, cloud engineering, cybersecurity, and business teams to ensure security is embedded throughout the software and AI development lifecycles."
**Why This Role Is Important To Us**: "The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's applications, AI capabilities, data, and digital platforms. As applications increasingly leverage AI and machine learning technologies, this role is responsible for ensuring secure-by-design principles are applied consistently across traditional applications, cloud-native services, APIs, and AI-powered solutions."
Combine into About the role paragraph(s). Could be two paragraphs.
**What You Will Be Responsible For**: list bullet points after colon. Let's extract each bullet:
- Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging technologies.
- Define and maintain application security and AI security standards, architecture patterns, and security requirements.
- Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions.
- Partner with application development, cloud engineering, AI engineering, and cybersecurity teams to embed security controls throughout the software and AI development lifecycles.
- Provide subject matter expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection.
- Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third-party AI services.
- Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise.
- Evaluate emerging application security and AI security threats, technologies, and industry standards.
**What We Value**: list bullet points:
- Deep expertise in application security, secure software development, and modern application architectures.
- Strong understanding of AI/ML security risks, Large Language Models (LLMs), agentic AI systems, prompt injection, model misuse, and AI supply chain security.
- Experience securing cloud-native applications, APIs, microservices, containers, Kubernetes, and AI-enabled platforms.
- Strong analytical, problem-solving, and risk assessment skills with the ability to evaluate both traditional and AI-specific security threats.
- Strong communication and stakeholder management skills with the ability to collaborate across architecture, engineering, cybersecurity, cloud, and data science teams.
**Education & Preferred Qualifications**: list bullet points:
- Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
- 14 years or more of experience in application security, software engineering, security architecture, AI security, or related technology disciplines with at least 8 years of hands-on cybersecurity experience preferred.
- Demonstrated experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid, and on-premises environments.
- Deep expertise in secure software development lifecycle (SSDLC), OWASP Top 10, API security, secure coding practices, and application security testing methodologies.
- Strong understanding of AI/ML architectures, LLMs, Retrieval-Augmented Generation (RAG), agentic systems, model security, prompt security, and responsible AI principles.
- Experience with cloud-native technologies, containers, Kubernetes, CI/CD pipelines, DevSecOps practices, and Infrastructure as Code (IaC).
- Experience conducting threat modeling, architecture reviews, penetration test remediation, and risk assessments for applications and AI-enabled solutions.
- Familiarity with SAST, DAST, IAST, software composition analysis (SCA), API security testing, model validation, and AI security assessment techniques.
- Professional certifications such as CISSP, CSSLP, CCSP, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, AI Security, or equivalent certifications are highly desirable.
- Experience within financial services or other highly regulated industries is preferred.
**Additional Requirements**: list bullet points:
- Experience supporting enterprise application modernization, cloud transformation, DevSecOps, and AI adoption initiatives.
- Ability to work effectively with application development, AI engineering, cloud engineering, architecture, and cybersecurity teams in a global environment.
- Limited travel may be required based on business needs.
**Work Requirement**: two sentences:
- Hybrid: Expected to work in accordance with State Street's hybrid work model.
- Shift: Standard business hours with flexibility to support global stakeholders across multiple time zones.
**Salary Range**: "$120,000 - $202,500 Annual The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ."
We can put as paragraph.
**Benefits**: paragraph describing benefits list. It includes: retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); eligibility for certain tax advantaged savings plans. Also link.
We could make a - list of benefits.
**About State Street**: paragraph(s). Could be kept as prose.
Now we need to strip boilerplate: The "About State Street" includes some generic but okay. Also there is "As an Equal Opportunity Employer..." etc which is boilerplate EEO; we must remove that. Also "Discover more information on jobs at StateStreet.com/careers Read our CEO Statement Job Application Disclosure It is unlawful in Massachusetts..." etc. Remove all that.
Also "Job ID: R-793885" remove.
Now produce HTML.
Structure:
About the role
We are looking for a Senior Application Security Architect. You will be responsible for designing, reviewing, and governing security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will partner with software engineering, data science, cloud engineering, cybersecurity, and business teams to ensure security is embedded throughout the software and AI development lifecycles.
The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's applications, AI capabilities, data, and digital platforms. As applications increasingly leverage AI and machine learning technologies, this role is responsible for ensuring secure-by-design principles are applied consistently across traditional applications, cloud-native services, APIs, and AI-powered solutions.
Responsibilities
- Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging technologies.
- Define and maintain application security and AI security standards, architecture patterns, and security requirements.
- Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions.
- Partner with application development, cloud engineering, AI engineering, and cybersecurity teams to embed security controls throughout the software and AI development lifecycles.
- Provide subject matter expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection.
- Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third-party AI services.
- Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise.
- Evaluate emerging application security and AI security threats, technologies, and industry standards.
Skills
- Deep expertise in application security, secure software development, and modern application architectures.
- Strong understanding of AI/ML security risks, Large Language Models (LLMs), agentic AI systems, prompt injection, model misuse, and AI supply chain security.
- Experience securing cloud-native applications, APIs, microservices, containers, Kubernetes, and AI-enabled platforms.
- Strong analytical, problem-solving, and risk assessment skills with the ability to evaluate both traditional and AI-specific security threats.
- Strong communication and stakeholder management skills with the ability to collaborate across architecture, engineering, cybersecurity, cloud, and data science teams.
Qualifications
- Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
- 14 years or more of experience in application security, software engineering, security architecture, AI security, or related technology disciplines with at least 8 years of hands-on cybersecurity experience preferred.
- Demonstrated experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid,
About the Company
. We must not repeat job title as heading. So no heading "Senior Application Security Architect". We must not put Job ID as heading. We need to output only HTML fragment. Let's extract content. **Who We Are Looking For** paragraph: "We are looking for a Senior Application Security Architect. You will be responsible for designing, reviewing, and governing security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will partner with software engineering, data science, cloud engineering, cybersecurity, and business teams to ensure security is embedded throughout the software and AI development lifecycles." **Why This Role Is Important To Us**: "The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's applications, AI capabilities, data, and digital platforms. As applications increasingly leverage AI and machine learning technologies, this role is responsible for ensuring secure-by-design principles are applied consistently across traditional applications, cloud-native services, APIs, and AI-powered solutions." Combine into About the role paragraph(s). Could be two paragraphs. **What You Will Be Responsible For**: list bullet points after colon. Let's extract each bullet: - Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging technologies. - Define and maintain application security and AI security standards, architecture patterns, and security requirements. - Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions. - Partner with application development, cloud engineering, AI engineering, and cybersecurity teams to embed security controls throughout the software and AI development lifecycles. - Provide subject matter expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection. - Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third-party AI services. - Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise. - Evaluate emerging application security and AI security threats, technologies, and industry standards. **What We Value**: list bullet points: - Deep expertise in application security, secure software development, and modern application architectures. - Strong understanding of AI/ML security risks, Large Language Models (LLMs), agentic AI systems, prompt injection, model misuse, and AI supply chain security. - Experience securing cloud-native applications, APIs, microservices, containers, Kubernetes, and AI-enabled platforms. - Strong analytical, problem-solving, and risk assessment skills with the ability to evaluate both traditional and AI-specific security threats. - Strong communication and stakeholder management skills with the ability to collaborate across architecture, engineering, cybersecurity, cloud, and data science teams. **Education & Preferred Qualifications**: list bullet points: - Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline. - 14 years or more of experience in application security, software engineering, security architecture, AI security, or related technology disciplines with at least 8 years of hands-on cybersecurity experience preferred. - Demonstrated experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid, and on-premises environments. - Deep expertise in secure software development lifecycle (SSDLC), OWASP Top 10, API security, secure coding practices, and application security testing methodologies. - Strong understanding of AI/ML architectures, LLMs, Retrieval-Augmented Generation (RAG), agentic systems, model security, prompt security, and responsible AI principles. - Experience with cloud-native technologies, containers, Kubernetes, CI/CD pipelines, DevSecOps practices, and Infrastructure as Code (IaC). - Experience conducting threat modeling, architecture reviews, penetration test remediation, and risk assessments for applications and AI-enabled solutions. - Familiarity with SAST, DAST, IAST, software composition analysis (SCA), API security testing, model validation, and AI security assessment techniques. - Professional certifications such as CISSP, CSSLP, CCSP, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, AI Security, or equivalent certifications are highly desirable. - Experience within financial services or other highly regulated industries is preferred. **Additional Requirements**: list bullet points: - Experience supporting enterprise application modernization, cloud transformation, DevSecOps, and AI adoption initiatives. - Ability to work effectively with application development, AI engineering, cloud engineering, architecture, and cybersecurity teams in a global environment. - Limited travel may be required based on business needs. **Work Requirement**: two sentences: - Hybrid: Expected to work in accordance with State Street's hybrid work model. - Shift: Standard business hours with flexibility to support global stakeholders across multiple time zones. **Salary Range**: "$120,000 - $202,500 Annual The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ." We can put as paragraph. **Benefits**: paragraph describing benefits list. It includes: retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); eligibility for certain tax advantaged savings plans. Also link. We could make a- list of benefits.
**About State Street**: paragraph(s). Could be kept as prose.
Now we need to strip boilerplate: The "About State Street" includes some generic but okay. Also there is "As an Equal Opportunity Employer..." etc which is boilerplate EEO; we must remove that. Also "Discover more information on jobs at StateStreet.com/careers Read our CEO Statement Job Application Disclosure It is unlawful in Massachusetts..." etc. Remove all that.
Also "Job ID: R-793885" remove.
Now produce HTML.
Structure:
About the role
We are looking for a Senior Application Security Architect. You will be responsible for designing, reviewing, and governing security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. You will partner with software engineering, data science, cloud engineering, cybersecurity, and business teams to ensure security is embedded throughout the software and AI development lifecycles.
The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's applications, AI capabilities, data, and digital platforms. As applications increasingly leverage AI and machine learning technologies, this role is responsible for ensuring secure-by-design principles are applied consistently across traditional applications, cloud-native services, APIs, and AI-powered solutions.
Responsibilities
- Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging technologies.
- Define and maintain application security and AI security standards, architecture patterns, and security requirements.
- Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions.
- Partner with application development, cloud engineering, AI engineering, and cybersecurity teams to embed security controls throughout the software and AI development lifecycles.
- Provide subject matter expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection.
- Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third-party AI services.
- Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise.
- Evaluate emerging application security and AI security threats, technologies, and industry standards.
Skills
- Deep expertise in application security, secure software development, and modern application architectures.
- Strong understanding of AI/ML security risks, Large Language Models (LLMs), agentic AI systems, prompt injection, model misuse, and AI supply chain security.
- Experience securing cloud-native applications, APIs, microservices, containers, Kubernetes, and AI-enabled platforms.
- Strong analytical, problem-solving, and risk assessment skills with the ability to evaluate both traditional and AI-specific security threats.
- Strong communication and stakeholder management skills with the ability to collaborate across architecture, engineering, cybersecurity, cloud, and data science teams.
Qualifications
- Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
- 14 years or more of experience in application security, software engineering, security architecture, AI security, or related technology disciplines with at least 8 years of hands-on cybersecurity experience preferred.
- Demonstrated experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid,