Principal Application Security Engineer/Architect
Core
Define, implement, and govern security standards for APIs, SDKs, microservices, and integrations across engineering teams.
Role type
Principal Application Security Architect / Team Lead
Builds
Secure-by-design application architectures, APIs, and SDK integrations
Domain
Application Security / Cloud-Native / API Security
Required skills
API security, OAuth2, OpenID Connect, JWT, mTLS, threat modeling, secure SDLC, cloud-native architecture, container security, supply-chain security, secure CI/CD
Preferred skills
Influence engineering leadership, regulatory compliance frameworks (OWASP ASVS, OWASP API Security Top 10)
Technologies
AWS, GCP, Azure, Docker, Kubernetes, Jenkins, GitLab CI
Responsibilities
Establish security architecture standards, review and approve API designs and authentication flows, lead threat modeling for new features, conduct deep-dive code reviews for high-risk components, define security requirements across the SDLC, collaborate with DevOps on secure CI/CD pipelines, evaluate third-party SDKs and libraries, drive vulnerability remediation, mentor engineering teams
Seniority
Principal, hands-on IC with mentorship