Application Security Architect Jobs
Application Security Architect jobs are open across fintech, healthcare, defense contracting, and enterprise technology, covering specializations in threat modeling, secure software development lifecycle, and cloud security architecture, from senior engineer to principal and distinguished architect. Scan the live roles below and apply to whichever ones fit.
Find JobsLooking for remote work? View remote application security architect jobs →Overview
Showing 5 of 17+ Application Security Architect jobs
Job Description Summary
Note: This position follows our hybrid-friendly schedule, so you get the best of both worlds – flexibility and collaboration. In office days are 3 days per week (including a Monday or Friday), in our St Petersburg, FL Corporate Office.Job Description
The Raymond James Enterprise Application Security Architecture team is seeking a Lead Security Architect to strengthen our organization’s security posture by focusing on secure design reviews, threat modeling, and vulnerability remediation. This role is integral to ensuring our applications and systems meet the highest security standards. The ideal candidate will be highly skilled in identifying, analyzing, and mitigating security risks, as well as collaborating with development teams to remediate vulnerabilities in both design and code effectively. Additionally, the position involves creating secure reference architectures informed by design reviews and industry best practices.
Key Responsibilities:
- Lead secure design reviews and threat modeling exercises for new applications, features, and architectural changes, ensuring adherence to industry standards, regulatory requirements, and organizational security policies.
- Collaborate with development teams to identify and remediate vulnerabilities in application code and system designs, providing hands-on guidance and actionable recommendations.
- Create and maintain secure reference architectures to serve as a foundation for implementing secure systems, applications, and solutions aligned with the organization's specific needs and technologies.
- Act as a trusted advisor to development teams, integrating security considerations into the software development lifecycle and promoting secure coding practices.
- Assess conformance with architectural standards, focusing on reducing technical debt and optimizing enterprise assets such as systems, services, and information.
- Provide technical expertise on security matters, including encryption, identity and access management, and secure communication protocols.
- Stay current with emerging security threats, trends, and best practices, applying relevant insights to enhance the organization's security posture.
- Collaborate with cross-functional teams, including infrastructure, DevOps tooling, and compliance, to align security measures with organizational goals and ensure seamless integration.
- Support security incident response efforts by contributing architectural expertise and defense-in-depth strategies as needed. Perform other duties and responsibilities as assigned, including occasional non-standard shifts or on call.
Skills/Previous Experience:
- More than six (6) years of experience in security engineering or architecture role, with a demonstrated focus on secure design reviews, threat modeling, and vulnerability management.
- In-depth knowledge of web application security principles, secure coding practices, and addressing common vulnerabilities (e.g., OWASP Top 10).
- Proficiency in designing secure architectures for on-premises and cloud (e.g. AWS, Azure) environments.
- Strong understanding of OAuth, authentication, and authorization mechanisms, including multi-factor authentication, single sign-on, and emerging technologies like password-less authentication.
- Experience in encryption technologies, such as certificate-based and token-based cryptography.
- Familiarity with network protocols, topologies, incident response, and defense-in-depth strategies.
- Experience with defense-in-depth strategies, understanding of incident response.
- Exceptional communication skills, capable of bridging the gap between technical and business stakeholders.
- Financial services experience is a plus but not required. The ability to quickly acquire relevant business acumen is essential.
- AI-Enabled Application Security: Experience leveraging artificial intelligence (AI) and large language models (LLMs) to identify, analyze, and remediate security vulnerabilities in custom-developed applications, including integrating AI-driven security capabilities into secure design reviews, code reviews, and DevSecOps processes. Enterprise AI Security: Experience designing and implementing security architectures and controls for the safe adoption of AI technologies in enterprise environments, including generative AI, AI agents, and Model Context Protocol (MCP) integrations, with a focus on protecting sensitive data, enforcing access controls, and mitigating AI-specific security risks.
Licenses/Certifications:
CISSP
Education
Bachelor’s - Completed: Computer and Information Science, Bachelor’s - Completed: Information Technology, High School (HS) - Completed (Required)Work Experience
General Experience - 6 to 10 yearsCertifications
Travel
Less than 25%Workstyle
HybridThe total compensation for this position includes base salary or wages, and may include components such as additional compensation (cash or equity), discretionary bonuses, or commissions. This position is eligible for a benefits package that may include medical, dental, and vision; life insurance; critical illness insurance and accident insurance; disability benefits; retirement savings; paid time off (including vacation, holidays, and sick leave); and parental leave. Eligibility for benefits and specific offerings may vary based on position and employment status. To view more details of the benefits offered, visit Myrjbenefits.com.
We expect our associates at all levels to:
- Grow professionally and inspire others to do the same
- Work with and through others to achieve desired outcomes
- Make prompt, pragmatic choices and act with the client in mind
- Take ownership and hold themselves and others accountable for delivering results that matter
- Contribute to the continuous evolution of the firm
At Raymond James – as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.
#LI-NM1Job Description Summary
Note: This position follows our hybrid-friendly schedule, so you get the best of both worlds – flexibility and collaboration. In office days are 3 days per week (including a Monday or Friday), in our St Petersburg, FL Corporate Office.Job Description
The Raymond James Enterprise Application Security Architecture team is seeking a Lead Security Architect to strengthen our organization’s security posture by focusing on secure design reviews, threat modeling, and vulnerability remediation. This role is integral to ensuring our applications and systems meet the highest security standards. The ideal candidate will be highly skilled in identifying, analyzing, and mitigating security risks, as well as collaborating with development teams to remediate vulnerabilities in both design and code effectively. Additionally, the position involves creating secure reference architectures informed by design reviews and industry best practices.
Key Responsibilities:
- Lead secure design reviews and threat modeling exercises for new applications, features, and architectural changes, ensuring adherence to industry standards, regulatory requirements, and organizational security policies.
- Collaborate with development teams to identify and remediate vulnerabilities in application code and system designs, providing hands-on guidance and actionable recommendations.
- Create and maintain secure reference architectures to serve as a foundation for implementing secure systems, applications, and solutions aligned with the organization's specific needs and technologies.
- Act as a trusted advisor to development teams, integrating security considerations into the software development lifecycle and promoting secure coding practices.
- Assess conformance with architectural standards, focusing on reducing technical debt and optimizing enterprise assets such as systems, services, and information.
- Provide technical expertise on security matters, including encryption, identity and access management, and secure communication protocols.
- Stay current with emerging security threats, trends, and best practices, applying relevant insights to enhance the organization's security posture.
- Collaborate with cross-functional teams, including infrastructure, DevOps tooling, and compliance, to align security measures with organizational goals and ensure seamless integration.
- Support security incident response efforts by contributing architectural expertise and defense-in-depth strategies as needed. Perform other duties and responsibilities as assigned, including occasional non-standard shifts or on call.
Skills/Previous Experience:
- More than six (6) years of experience in security engineering or architecture role, with a demonstrated focus on secure design reviews, threat modeling, and vulnerability management.
- In-depth knowledge of web application security principles, secure coding practices, and addressing common vulnerabilities (e.g., OWASP Top 10).
- Proficiency in designing secure architectures for on-premises and cloud (e.g. AWS, Azure) environments.
- Strong understanding of OAuth, authentication, and authorization mechanisms, including multi-factor authentication, single sign-on, and emerging technologies like password-less authentication.
- Experience in encryption technologies, such as certificate-based and token-based cryptography.
- Familiarity with network protocols, topologies, incident response, and defense-in-depth strategies.
- Experience with defense-in-depth strategies, understanding of incident response.
- Exceptional communication skills, capable of bridging the gap between technical and business stakeholders.
- Financial services experience is a plus but not required. The ability to quickly acquire relevant business acumen is essential.
- AI-Enabled Application Security: Experience leveraging artificial intelligence (AI) and large language models (LLMs) to identify, analyze, and remediate security vulnerabilities in custom-developed applications, including integrating AI-driven security capabilities into secure design reviews, code reviews, and DevSecOps processes. Enterprise AI Security: Experience designing and implementing security architectures and controls for the safe adoption of AI technologies in enterprise environments, including generative AI, AI agents, and Model Context Protocol (MCP) integrations, with a focus on protecting sensitive data, enforcing access controls, and mitigating AI-specific security risks.
Licenses/Certifications:
CISSP
Education
Bachelor’s - Completed: Computer and Information Science, Bachelor’s - Completed: Information Technology, High School (HS) - Completed (Required)Work Experience
General Experience - 6 to 10 yearsCertifications
Travel
Less than 25%Workstyle
HybridThe total compensation for this position includes base salary or wages, and may include components such as additional compensation (cash or equity), discretionary bonuses, or commissions. This position is eligible for a benefits package that may include medical, dental, and vision; life insurance; critical illness insurance and accident insurance; disability benefits; retirement savings; paid time off (including vacation, holidays, and sick leave); and parental leave. Eligibility for benefits and specific offerings may vary based on position and employment status. To view more details of the benefits offered, visit Myrjbenefits.com.
We expect our associates at all levels to:
- Grow professionally and inspire others to do the same
- Work with and through others to achieve desired outcomes
- Make prompt, pragmatic choices and act with the client in mind
- Take ownership and hold themselves and others accountable for delivering results that matter
- Contribute to the continuous evolution of the firm
At Raymond James – as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.
#LI-NM1Application Security Architect Jobs by Experience Level
See All 17 Application Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsApplication Security Architect Job Market
Who's Hiring
Top Industries Hiring
- Biotechnology & Pharmaceuticals
- Accounting & Auditing
- Media & Entertainment
- Staffing & Recruiting
What Employers Look For
The qualifications that appear most often in application security architect jobs.
- Five or more years of application security experience with hands-on secure code review
- Proficiency in threat modeling methodologies such as STRIDE, PASTA, or LINDDUN
- Experience integrating security tooling into CI/CD pipelines including SAST and DAST tools
- Relevant certification such as CISSP, CSSLP, or CEH preferred or required
- Deep knowledge of OWASP Top 10 and secure software development lifecycle practices
- Bachelor's degree in computer science, cybersecurity, or a related technical field
Tips for Your Application Security Architect Job Search
Align your resume to SDLC ownership
Hiring managers for application security architects want proof you shaped security requirements before code was written, not just audited after. Reframe your resume bullets to show where you owned threat modeling or secure design reviews early in the development cycle.
Certify in cloud-native security domains
Many job descriptions now require demonstrated cloud security competency alongside application-layer expertise. Credentials like CSSLP, AWS Security Specialty, or GWAPT signal you can architect controls for containerized and serverless environments, not just traditional web applications.
Apply early to roles that fit
Migrate Mate lists application security architect openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Target postings that name your tech stack
Filter openings by the specific frameworks and languages you have secured, such as Spring, Node.js, or .NET. Matching your hands-on stack to the posting's requirements gives your application a concrete hook that generic security experience alone does not provide.
Prepare a threat model walkthrough for interviews
Most application security architect interviews include a live design exercise. Practice walking through a threat model for a realistic system, like a payment API, using STRIDE or PASTA methodology, so you can articulate decisions clearly under time pressure.
Negotiate scope alongside compensation
When evaluating an offer, clarify whether you will own security architecture decisions or serve in an advisory capacity. Architect roles where security requirements can be overridden by product timelines significantly limit your ability to demonstrate impact, which affects your next career move.
Application Security Architect Jobs: Frequently Asked Questions
Which companies are hiring the most application security architects?
The most active employers for application security architects right now are AbbVie, FINRA, and Jobot, and the most openings are in Texas, Virginia, and Florida, based on current listings on Migrate Mate as of November 2026. Financial services and defense contractors consistently represent a large share of these openings given their regulatory and compliance requirements.
How many application security architect jobs are remote?
About 71% of application security architect openings are fully remote or hybrid as of November 2026, reflecting strong demand for distributed security expertise. Cloud security architecture and application security program management sub-roles tend to be the most remote-friendly, while positions requiring hands-on lab environments or government clearance more often require on-site presence.
How do you become an application security architect?
Start by building hands-on software development experience so you understand the codebases you will later secure. Move into application security engineering roles where you conduct code reviews, penetration tests, and vulnerability assessments. Deepen your threat modeling skills, earn a credential such as CSSLP or CISSP, and take on cross-team projects that require you to influence secure design decisions at an architectural level.
Can you get hired as an application security architect with little experience?
Direct architect roles typically require substantial prior application security experience, but you can build toward the title by moving through application security engineer or security consultant positions first. Contributing to open-source security tooling, publishing documented threat models, or earning a recognized certification helps demonstrate architectural thinking even before you hold the title.
What does the application security architect interview process look like?
Most processes include an initial screening call, a technical phone interview focused on secure design principles and common vulnerability classes, and a final round with a live architectural exercise where you threat-model a system from scratch. Some employers add a code review stage or ask you to critique an existing insecure design. Expect questions about how you influence engineering teams who do not have a security background.
Where can I find and apply to application security architect jobs?
You can find and apply to application security architect jobs on Migrate Mate, which lists current openings from across the United States. Search the roles available, find the ones that match your experience and target industry, and apply directly to each listing that fits your background.
See All 17 Application Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs