PS, Solution Architect ( Armis/Veza)
Core
Architect and automate application security posture, integrating vulnerabilities into the VIPR framework to bridge engineering, product security, and vulnerability management.
Role type
Senior Application Security Architect (AppSec/VIPR)
Builds
Automated AppSec pipelines, secure architecture reviews, and risk-based remediation workflows for SaaS and on-prem platforms.
Domain
Cybersecurity, Application Security, Cloud-Native Security
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Application Security program leadership, Secure design and architecture reviews, Threat modeling (STRIDE/DREAD/PASTA), Vulnerability lifecycle management (VMDR), SAST/DAST/SCA/API security integration, CI/CD pipeline automation, Secure coding standards (React/Node/Python/Java/Go), Mentorship and enablement, Compliance support (SOC 2/ISO 27001/FedRAMP/HIPAA)
Preferred skills
SaaS/cybersecurity product experience, VIPR/exposure management integration, Cloud/container security platforms (Prisma Cloud/Wiz/Orca), IaC security (Terraform/CloudFormation), API Gateway/Zero-trust expertise, Security certifications (OSWE/CSSLP/GWAPT), Hands-on coding in 2+ languages, End-to-end vulnerability management, OWASP/CWE/CVE expertise, Microservices/API security
Technologies
GitHub Actions, Jenkins, Buildkite, Docker, Kubernetes, Veracode, Checkmarx, Fortify, Snyk, SonarQube, OWASP Dependency-Check, Prisma Cloud, Wiz, Orca, Terraform, CloudFormation, React, Node.js, Python, Java, Go
Responsibilities
Lead the Application Security program across all products; Perform secure design and architecture reviews; Conduct threat modeling sessions; Own application-layer vulnerability management from detection to remediation; Build and maintain automated AppSec pipelines; Develop secure coding standards and baselines; Mentor engineers and security champions; Support compliance and audit readiness
Seniority
Senior, hands-on IC