Application Security Architect

Job Title: Application Security Architect

Area: Technology Services & Information Security

Reports to: Security Officer

Classification: Exempt

Location: Evanston, IL

This position is designated as Hybrid - Fully Flexible and is expected to work from the world headquarters office once per month to several times a week. The specific days are determined by management based on business needs. Employees must live within a reasonable daily commuting distance to Evanston.

Position Overview

As an Application Security Architect, you will be responsible for implementing a security application program, including implementing application security tools, determining application training requirements, and working with the architecture review board to ensure security best practices are integrated into the software development lifecycle. You will also oversee overall security architecture and assist the Information Security Officer in implementing the overall security strategy.

You Will Have

• Bachelor’s degree in computer science, Information Security, or a related field preferred.
• Security related certifications preferred.
• 5+ years of experience in IT and application architecture and security technologies.
• Familiarity with security standards and frameworks such as NIST, CIS, GDPR, MITRE ATT&CK, etc.
• Experience with performing architecture reviews to steer projects early, leading security reviews, and developing security ownership.
• Experience with application scanning tools (e.g., Snyk, Rapid7, Checkmarx, SonarQube) implementation and integration with CI/CD pipelines.
• Good understanding of Threat and Vulnerability Management, SIEM, EDR, DMARC, DKIM, DLP, and PKI.
• Knowledge of cyber risk quantification methodologies.
• Ability to collaborate with experienced and innovative leaders who share a clear vision and a track record of success.
• Hands‑on experience and a good understanding of security in data centers and cloud across networked infrastructure, application, and data.

You Will Be Responsible For

Security Architecture and Design

• Lead security architecture direction for solutions and influence peers, cross‑functional partners, and IT leadership.
• Consult and lead the design of security best practices and implementation of solid security principles across the organization to meet business goals, customer, and regulatory requirements.
• Review solution design for compliance with Information Security Standards.
• Design, build, and implement enterprise‑class security systems for cloud and on‑prem production environments.
• Ensure the organization implements a security architecture that enables growth while keeping infrastructure and customer data secure.

Application Security Management

• Design, implement, and maintain application security architecture framework.
• Review application architecture diagrams, data flow diagrams, and network diagrams and advise on non‑compliance issues.
• Perform and document threat modelling and reviews.
• Support the security awareness program by providing documented examples and training sessions to developers and engineers.
• Coordinate with application teams to implement application security monitoring.

Security Documentation and Evangelism

• Refine security efforts by further defining processes, procedures, and controls for cloud‑based tolerant systems that require stringent data security.
• Effectively communicate security risk to various audience levels.
• Provide security requirements and recommendations on solution design to technical and business teams.
• Collaborate closely with key members of Technology Services and Product teams.

Leadership Attributes

• Communication: Open to receiving ideas from diverse viewpoints and able to communicate messages so that they are universally understood.
• Collaboration: Builds partnerships and works jointly with others to meet shared objectives.
• Accountability: Has a clear sense of ownership and takes personal responsibility for actions.

Salary Range

$157,500 - $175,000

Benefits

• Generous medical, dental, and vision benefits package.
• Progressive 401k matching contributions.
• Above‑market and generous paid time off package.
• Tuition reimbursement.
• Professional development opportunities.
• On‑site cafeteria and coffee bar with special pricing for employees.
• Flextime and several different work schedules to choose from.
• Proximity to CTA, Metra, a variety of stores, and many food options.