Senior Application Security Architect

We are looking for a Senior Application Security Architect. You will be responsible for designing, reviewing, and governing security architectures for enterprise applications, APIs, cloud‑native platforms, and AI‑enabled systems. You will partner with software engineering, data science, cloud engineering, cybersecurity, and business teams to ensure security is embedded throughout the software and AI development lifecycles.

Why This Role Is Important To Us

The role sits within the Security Architecture organization, a function critical to protecting the firm’s applications, AI capabilities, data, and digital platforms. As applications increasingly leverage AI and machine learning, this position ensures secure‑by‑design principles are applied consistently across traditional applications, cloud‑native services, APIs, and AI‑powered solutions.

Responsibilities

• Design and review secure architectures for enterprise applications, APIs, cloud‑native platforms, AI‑enabled systems, and emerging technologies.
• Define and maintain application security and AI security standards, architecture patterns, and security requirements.
• Conduct security architecture reviews, threat‑modeling exercises, and design assessments for applications, APIs, and AI solutions.
• Partner with application development, cloud engineering, AI engineering, and cybersecurity teams to embed security controls throughout the software and AI development lifecycles.
• Provide subject‑matter expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection.
• Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third‑party AI services.
• Drive adoption of secure‑by‑design, Zero Trust, DevSecOps, and AI security best practices across the enterprise.
• Evaluate emerging application security and AI security threats, technologies, and industry standards.

Qualifications

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
• 14+ years of experience in application security, software engineering, security architecture, AI security, or related fields; 8+ years of hands‑on cybersecurity experience preferred.
• Deep expertise in application security, secure software development, and modern application architectures.
• Strong understanding of AI/ML security risks, Large Language Models (LLMs), agentic AI systems, prompt injection, model misuse, and AI supply‑chain security.
• Experience securing cloud‑native applications, APIs, microservices, containers, Kubernetes, and AI‑enabled platforms.
• Proficiency with secure software development lifecycle (SSDLC), OWASP Top 10, API security, secure coding practices, and application security testing methodologies.
• Familiarity with cloud‑native technologies, containers, Kubernetes, CI/CD pipelines, DevSecOps practices, and Infrastructure as Code (IaC).
• Experience conducting threat modeling, architecture reviews, penetration‑test remediation, and risk assessments for applications and AI‑enabled solutions.
• Knowledge of SAST, DAST, IAST, software composition analysis (SCA), API security testing, model validation, and AI security assessment techniques.
• Professional certifications such as CISSP, CSSLP, CCSP, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, AI Security, or equivalent are highly desirable.
• Experience within financial services or other highly regulated industries is preferred.
• Experience supporting enterprise application modernization, cloud transformation, DevSecOps, and AI adoption initiatives.
• Ability to work effectively with cross‑functional teams in a global environment.
• Limited travel may be required based on business needs.

Work Environment

• Hybrid work model in accordance with State Street’s policies.
• Standard business hours with flexibility to support global stakeholders across multiple time zones.

Pay

Salary range: $120,000 – $202,500 Annual (applicable to the primary location; ranges may differ for other locations).

Benefits

• Retirement savings plan (401 k) with company match.
• Comprehensive insurance coverage: basic life, medical, dental, vision, long‑term disability, and optional additional coverages.
• Paid time off including vacation, sick leave, short‑term disability, and family care responsibilities.
• Employee Assistance Program.
• Incentive compensation with eligibility for annual performance‑based awards.
• Eligibility for certain tax‑advantaged savings plans.