Principal Application Security Architect
Core
Design and secure API architectures, cloud environments, and AI/ML pipelines for a financial services firm, focusing on threat prevention, detection, and zero-trust implementation.
Role type
Principal Application Security Architect
Builds
Secure API gateways, microservices architectures, and AI/ML security controls for financial advisors and institutions
Domain
Financial Services / Cloud Security / AI Security
Deliverable
production ML models | product features | infrastructure
Required skills
API security design, OAuth/JWT/OpenID Connect, zero-trust architecture, threat modeling, risk assessment, vulnerability management, SIEM implementation, incident response, secure DevOps, AI/ML security controls
Preferred skills
Java/C#/Python, AWS core services (EC2, S3, IAM, VPC, Security Hub, WAF, GuardDuty), Infrastructure as Code (Terraform, CloudFormation, Pulumi, Ansible), CCSP/CISSP/GIAC certifications, deep learning frameworks, AI ethics
Technologies
AWS, Terraform, CloudFormation, Pulumi, Ansible, OAuth, JWT, OpenID Connect, SIEM, Python, Java, C#, Ruby
Responsibilities
Implement robust access control mechanisms and configure API gateway security; Develop reusable security design patterns and standards; Lead design of security architectures integrating advanced technologies; Conduct threat analysis and risk assessments; Secure machine learning models and AI pipelines against adversarial attacks; Oversee risk management frameworks
Seniority
Principal, hands-on IC with strategic oversight