Lead Application Security Architect

FINRA

. Design and establish enterprise application security architecture frameworks, reference models, and roadmaps .

Posted 10/20/2026full-timeUnited StatesSenior💰 $131,200 - $238,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing enterprise application security architectures, including secure coding standards and risk management strategies. Proficient in leading security initiatives, mentoring teams, and ensuring compliance with regulatory standards in the financial services sector.

Highest-signal resume keywords

Enterprise Application Security ArchitectureSecure Software AssuranceIntrusion Detection and Incident ResponseSecurity Configuration ManagementAPI Security Strategies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure Coding StandardsRisk ManagementAccess Control DesignSecurity Policy DevelopmentCommunications Protocol KnowledgeCybersecurity Tool ManagementAuthentication and AuthorizationEncryption TechniquesData Loss PreventionGenAI Security Architecture

Soft Skills

Technical CommunicationRelationship BuildingPlanning SkillsAdaptabilityMentoring

Tools & Technologies

Configuration Assessment ToolsLog Aggregation ToolsWeb Application Security Testing ToolsNetwork Access Control SystemsEndpoint Security Solutions

Industry Keywords

Financial ServicesFINRA ComplianceInformation SecurityCybersecuritySecure Data Handling

Tech Stack

Tools & technologies

Cyber SecurityMicroservices

About the role

Key responsibilities & impact

Design and establish enterprise application security architecture frameworks, reference models, and roadmaps
Develop and maintain security baselines, secure coding standards, and reusable patterns across web, mobile, API, microservices, and GenAI technologies
Architect authentication, authorization, encryption, secure communication, and secure data-handling capabilities
Design API security strategies using OAuth/OIDC flows, API gateways, and rate limiting
Identify, validate, prioritize, and manage application security risks
Lead security requirements elicitation and design security controls
Design security architecture patterns and reference models for GenAI and LLM applications, including RAG, agentic workflows, and model integration
Define controls for GenAI risks including prompt injection, insecure output handling, training data poisoning, sensitive information disclosure, model denial of service, and supply-chain vulnerabilities
Architect GenAI guardrails including validation, content filtering, rate limiting, data loss prevention, and human-in-the-loop controls
Establish standards for secure prompts, embeddings, vector databases, and model artifacts
Leverage GenAI to enhance security architecture reviews and automate security analysis
Develop strategies for consistent enterprise security-control use and monitoring
Ensure controls operate effectively; resolve discrepancies and prioritize control outputs
Enforce and monitor compliance with internal and external regulations, policies, and standards
Evaluate and recommend new security technologies, techniques, and tools
Lead development and promotion of information-security policies, standards, guidelines, and procedures
Direct process-improvement initiatives and provide process feedback
Mentor junior staff and contribute to team development
Represent security on external process-improvement committees
Provide backup coverage for next-level management
Collaborate in-person and virtually to support FINRA’s mission of investor protection and market integrity
Ensure adherence to technology policies, security controls, and FINRA standards

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Systems or related discipline with at least seven (7) years of related experience, or equivalent training and/or work experience
Master’s degree and past Financial Services industry experience preferred
Direct experience leading network and systems architecture, design and implementation
Experience in secure software assurance
Experience in intrusion detection, defense and incident response
Experience in security configuration management
Experience designing and implementing access controls
Experience developing security policies and standards
In-depth knowledge of more than one communications protocol
Experience managing multiple cybersecurity tools, including Configuration Assessment, Log Aggregation, Integrity Verification, Web Application Security Testing, Network Access Control System, Network Intrusion Prevention Systems, and Endpoint Security Solutions
Strong written and verbal technical communication skills
Ability to develop effective working relationships
Ability to handle competing priorities in a fast-paced environment
Excellent planning skills
Ability to rapidly develop proficiency in new skills
Willingness to accept new challenges and learn changing concepts, technologies, and procedures
In-depth knowledge across all areas of Information Security
Occasional travel and extended hours may be required
FINRA employees must comply with the Code of Conduct, brokerage-account disclosures, securities-account restrictions, confidentiality and invention assignment requirements, and nepotism policy

Benefits

Comp & perks

Discretionary bonus may be available in addition to base pay
Comprehensive health, dental and vision insurance
Basic life, accidental death and dismemberment, supplemental life, spouse/domestic partner and dependent life, and spouse/domestic partner and dependent accidental death and dismemberment insurance
Short- and long-term disability insurance
Long-term care insurance
Business travel accident insurance
Legal insurance
401(k) plan with immediate participation, vesting, and company match
Additional FINRA-funded retirement contribution
Tuition reimbursement
Commuter benefits
Adoption assistance
Backup family care
Surrogacy benefits
Employee assistance
Wellness programs
15 days of paid time off initially, increasing up to 25 days with years of service
5 personal days
9 sick days
2 volunteer service days
Military leave
Jury duty leave
Bereavement leave
Voting and election official leave
Care of a family member leave after 90 days of employment
Childbirth and parental leave after 90 days of employment
9 paid holidays for full-time employees
Overtime pay for non-exempt employees in accordance with applicable law