Application Security Architect
Core
Design and improve safeguards across healthcare applications, APIs, data exchanges, cloud services, and supporting infrastructure to protect Personal Health Information (PHI) and sensitive client data.
Role type
Senior, hands-on IC Application Security Architect
Builds
Secure SDLC and AIDLC practices, risk-based review criteria, threat models, and architectural guidance for engineering and DevOps teams
Domain
Healthcare / Application Security / Cloud Security
Deliverable
production ML models
Required skills
Application security architecture, threat modeling, Secure SDLC/AIDLC influence, AI security (prompt injection, LLM guardrails), supply-chain risk, cryptography, identity management, multi-tenant SaaS security, HIPAA/HITRUST compliance, AWS architecture
Preferred skills
Healthcare SaaS experience, DevOps/development experience, CSSLP/CISSP/CCSP certifications
Technologies
AWS, Snowflake, SAST, SCA, DAST, OAuth 2.0, OpenID Connect, STRIDE, MITRE CWE, NIST SSDF
Responsibilities
Establish risk-based review criteria for new applications and AI features; lead threat modeling for applications, APIs, and AI-enabled features; maintain reusable security patterns and architecture decision records; influence Secure SDLC and AIDLC through architecture gates and release criteria; define validation requirements for AI-generated code; provide senior architectural review and escalation for vulnerability management and penetration testing
Seniority
Senior, hands-on IC
