Application Security Architect - AI Harness

Salary: $80,000 - 104,000 per year Requirements:

• Bachelors degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, Engineering, or a related discipline.
• 10+ years of experience in application security, secure software engineering, DevSecOps, security architecture, or a related cybersecurity field.
• Strong expertise in secure code review, vulnerability identification, threat modeling, exploitability analysis, and secure SDLC practices.
• Experience conducting vulnerability and penetration test readouts or walkthroughs with stakeholders.
• Hands-on background with SAST, SCA, DAST, secrets scanning, API security testing, container security, infrastructure-as-code scanning, and developer workflow integrations.
• Experience embedding security controls into SDLC pipeline tooling such as Jenkins, GitHub Actions, GitHub Enterprise, Atlassian, developer portals, source-control workflows, and DevSecOps toolchains.
• Practical experience using LLMs or AI models for code review, software engineering, vulnerability research, security analysis, or developer productivity use cases.
• Understanding of prompt engineering and optimization, RAG, model evaluation, AI guardrails, human-in-the-loop review, prompt/model versioning, and vendor or open-source model trade-offs.
• Experience building or maintaining evaluation harnesses, benchmark suites, regression tests, validation pipelines, and test orchestration workflows.
• Strong knowledge of OWASP, CWE, CVSS, NIST SSDF, AI security risks, regulated source-code handling, auditability, and vendor or model governance.
• Preferred: masters degree or relevant certifications such as CISSP, CSSLP, OSWE, GWAPT, CCSP, cloud security, Kubernetes security, or AI governance credentials.
• Preferred: experience delivering AI-assisted AppSec capabilities in a Fortune 500 or highly regulated financial services environment.
• Preferred: hands-on experience with enterprise AI platforms, approved vendor models, open-source models, secure hosting, RAG, and AI governance controls.
• Preferred: experience building secure code review automation, custom static analysis rules, vulnerability detection pipelines, benchmark datasets, or AI-based developer tooling.
• Preferred: demonstrated success reducing AppSec risk through better detection accuracy, fewer false positives, faster remediation, and stronger developer enablement.

• Architect a CI/CD-integrated AI secure-code evaluation harness as a hands-on individual contributor for source code repositories and Secure SDLC lifecycles.
• Integrate evaluation workflows with pipeline tooling and AppSec reporting platforms.
• Design AI-assisted secure code review methods that complement SAST, SCA, DAST, secrets scanning, IaC scanning, threat modeling, security testing, and manual assessments.
• Maintain benchmarks, golden test cases, prompt and model versions, retrieval configurations, scoring criteria, and regression tests for AI-generated findings.
• Govern approved vendor and frontier AI models, including selection, routing, fallback approaches, accuracy, explainability, cost, and data-protection trade-offs.
• Define safeguards for proprietary production code, including access controls, approved model endpoints, minimization, retention limits, secure logging, and evidence handling.
• Route validated findings into developer workflows with actionable remediation guidance and feedback loops to reduce false positives and improve adoption.
• Define metrics and control evidence aligned to internal governance processes, financial-services authorities, and cybersecurity frameworks such as NIST SSDF, NIST CSF 2.0, NYDFS, FINRA, SOX ITGC, FFIEC, and GLBA.

• AI
• API
• Architect
• Atlassian
• CI/CD
• Cloud
• DevSecOps
• GitHub
• Support
• Jenkins
• Kubernetes
• OWASP
• RAG
• Security

More:

We are Edward Jones, a Fortune 500 financial services firm with over 9 million clients and 20,000 financial advisors across the U.S. and Canada. We are privately owned, so we stay focused on our clients rather than shareholder returns. Our purpose is to partner for positive impact, improving the lives of our clients and colleagues while strengthening our communities and society. We are an innovative, flexible, and inclusive organization that values belonging, performance excellence, and the contributions of our associates. This role is part of our Application Security team, focused on secure code evaluation, AI-enabled AppSec, DevSecOps, and governance in a highly regulated environment. We support a comprehensive benefits package that includes medical, dental, vision, disability, life, retirement savings, tax-advantaged accounts, paid holidays, vacation, sick time, personal days, volunteer time, potential bonuses and profit sharing, and our Employee Assistance Program. For associates within commuting distance of our Tempe, AZ and St. Louis, MO home offices, we expect in-office work several days per week based on the effective date noted in the posting.

last updated 41 week of 2026