Your browser does not support javascript! Please enable it, otherwise web will not work for you.

AVP, Cyber Application Security Architect

Home > Other programming jobs

AVP, Cyber Application Security Architect in USA

  • Remote

Responsibilities

  • Serve as the security architecture authority for product, engineering, cloud, and business stakeholders.
  • Coach developers on secure coding patterns, vulnerability classes, frameworks, libraries, and secure-by-default implementation choices.
  • Triage and validate SAST, SCA, DAST, container, and IaC scanning findings, including resolving false positives and prioritizing risk.
  • Drive adoption of CNAPP, CWPP, WAF, service mesh security, API gateways, SIEM/SOAR, and cloud-native telemetry.
  • Conduct Secure by Design reviews and lead threat modeling workshops for new applications and material architectural changes.
  • Review authentication, authorization, data flows, secrets handling, logging, monitoring, and resiliency controls.
  • Translate FedRAMP, SOC2, ISO 27001, NIST SP 800-53, CSA CCM, and SOX requirements into auditable security architecture controls.
  • Advise on CI/CD hardening, least privilege, artifact integrity, signing, provenance, secure deployment, dependency security, and supply chain controls.
  • Provide security architecture guidance for AI/ML and GenAI-enabled applications and help implement data protection, access control, monitoring, and abuse-prevention controls.
  • Create secure coding guidance, reference architectures, reusable patterns, and preventative improvements based on incident learnings.

Requirements

  • 8+ years of related IT experience.
  • 5+ years of experience with security application tools.
  • 6+ years of experience conducting application security reviews of new architecture.
  • 5+ years of experience with public and hybrid cloud environments, including AWS, Azure, and GCP.
  • Strong software development background with the ability to read, understand, and advise on production code and design decisions.
  • Expertise in threat modeling and secure architecture reviews for modern web and API-based applications.
  • Expertise securing CI/CD and SDLC processes, including pipeline security, secrets management, artifact integrity, build and release controls, and automation.
  • Experience managing application security findings and resolving false positives using SAST, SCA, DAST, and related pipeline scanning tools.
  • Working knowledge of AI/ML security risks and mitigations for applications using ML models or GenAI components.
  • Strong collaboration, consulting, communication, and influencing skills, including the ability to influence without authority and provide pragmatic developer-friendly recommendations.

Salary: $160k - $195k/yr

EXL

Choosing a digital partner is about more than capabilities — it’s about collaboration and character. Unrealistic overhauls and off-the-shelf products ignore what matters most — your unique needs, culture, goals, and your legacy data and technology environments. At EXL, our collaboration is built ...

Similar positions

Product Security Engineer

  • Base Power Company
  • Full time
  • USA
  • 10/15/2026
  • Austin, TX

Principal Architect, GTM Systems

  • Henry Schein One
  • Full time
  • Remote
  • 10/15/2026
  • Salary: $130k-$160k
  • Worldwide

Salesforce Technical Architect

  • NeuraFlash
  • Full time
  • Remote
  • 10/15/2026
  • Canada

Technical Application Consultant

  • NEC Software Solutions (India)
  • Full time
  • Remote
  • 10/15/2026
  • Salary: Competitive
  • United Kingdom

Enterprise Agentic AI Architect

  • Coursera
  • Full time
  • Remote
  • 10/15/2026
  • India