Application Security Architect

Application Security Architect - AI / GenAI Location: NYC / NJC - Hybrid Client: S&P Global FTE Visa independent only Role Overview We are looking for an Application Security Architect with strong experience in Application Security, DevSecOps, Cloud Security, and AI/GenAI security. The role will focus on securing enterprise applications, APIs, microservices, and AI-powered applications. Key Responsibilities Design and implement application security architecture across applications, APIs, and microservices. Perform threat modeling, security reviews, and vulnerability assessments. Embed security into the SDLC and CI/CD pipelines using SAST, DAST, SCA, and other security tools. Ensure secure coding practices aligned with OWASP Top 10 and API Security. Secure cloud-native applications across AWS/GCP, Kubernetes, and containers. Define security controls for GenAI, LLM, RAG, and Agentic AI applications. Address AI security risks such as prompt injection, data leakage, insecure outputs, and excessive agency. Implement IAM, authentication, authorization, encryption, Policy-as-Code, and Identity-as-Code. Partner with engineering and security teams to drive security-by-design. Required Skills 12+ years of experience in Application Security / Security Architecture. Strong knowledge of OWASP, Threat Modeling, Secure SDLC, API Security, SAST/DAST/SCA. Experience with AWS/GCP, Kubernetes, Docker, CI/CD, Terraform. Strong understanding of OAuth2, OIDC, JWT, IAM, RBAC/ABAC. Experience with GenAI/LLM, RAG, Agentic AI, or AI Security. Knowledge of LangChain/LangGraph, vector databases, and AI security controls is a plus. Strong communication and stakeholder management skills. #J-18808-Ljbffr VRPro IT