Lead Application Security Architect
Core
Senior individual contributor responsible for bridging application security engineering and enterprise security architecture, designing secure architectures for application ecosystems, and integrating security into the SDLC.
Role type
Senior IC application security architect
Builds
Secure application ecosystems, cloud-native environments, and microservices architectures
Domain
Real estate technology / Application Security
Required skills
Application security methodologies (OWASP, SANS/CWE), Cloud-native security (AWS, Azure, GCP), DevSecOps tooling (SAST, DAST, SCA), Threat modeling (STRIDE, PASTA), Zero-trust architecture, IAM (OAuth 2.0/OIDC), Cryptography
Preferred skills
CSSLP, CISSP, AWS/Azure Security Specialty, OSCP, OWASP GenAi/LLM Top 10 knowledge
Technologies
AWS, Azure, GCP, Microservices, APIs, Containers, CI/CD pipelines
Responsibilities
Design and maintain security architecture standards and patterns for enterprise applications; Lead security architecture reviews and threat modeling sessions; Champion secure coding standards and developer security enablement; Mentor junior engineers and developers on secure design practices; Coordinate security design reviews and approval processes across engineering and architecture teams.
Seniority
Senior, hands-on IC with mentorship responsibilities
