Application Security Architect

ServiceLink

. Build and publish production-ready security reference architectures and reusable templates .

Posted 10/28/2026full-timePlano • Texas • United StatesSeniorLead💰 $170,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in application security and security architecture, with a strong focus on cloud-native Azure environments and microservice/API security. Proven ability to lead security initiatives, mentor teams, and implement effective security controls within CI/CD workflows.

Highest-signal resume keywords

Application SecurityCloud-Native Azure EnvironmentsThreat ModelingCI/CD Security ControlsMicroservice/API Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Architecture OwnershipRBAC and Authorization ArchitectureContainer and Kubernetes HardeningSAST, SCA, DAST EvaluationManaged Identity AdoptionData ProtectionBackend Development (.NET or Python)Security Metrics ProgramsChaos EngineeringRisk-Based Security Gates

Soft Skills

MentoringCross-Team CollaborationCommunication with StakeholdersProblem-SolvingDesign Review

Tools & Technologies

Azure DevOpsAKSApp ServicesEntra IDCI/CD WorkflowsSecurity Scorecard MetricsPenetration Testing ToolsIncident Response ToolsSecrets Management SolutionsContainer Security Tools

Industry Keywords

Financial ServicesRegulated EnvironmentSecurity MetricsIncident ResponseOffensive Security

Tech Stack

Tools & technologies

AzureCloudKubernetesPythonSQL.NET

About the role

Key responsibilities & impact

Build and publish production-ready security reference architectures and reusable templates
Lead threat modeling and design reviews for new and materially changed services
Own RBAC and authorization architecture, including endpoint-to-data classification and least-privilege mapping
Design and drive managed identity adoption for SQL, Cosmos DB, and service-to-service communication
Implement container and Kubernetes hardening controls, including image trust, patch cadence, and egress guardrails
Evaluate and tune SAST, SCA, DAST, IaC, container, and secret scanning against real codebases and deployment patterns
Define AI/LLM security guardrails, including prompt-injection defenses, model/data access controls, and safe-use patterns
Lead chaos engineering exercises to validate security controls and resilience under failure and attack scenarios
Define risk-based security gates in Azure DevOps and partner with engineering on pragmatic exception handling
Convert third-party penetration test and internal findings into durable engineering fixes and regression checks
Mentor engineers and junior security staff through design pairing, code review, and incident retrospectives
Present architecture decisions, risks, and remediation progress to technical and executive stakeholders
Publish a target-state application security architecture with a prioritized implementation roadmap within the first 90 days
Deliver two end-to-end secure reference implementations: one API service and one data-access service
Establish a baseline threat-model workflow for all tier-1 services with tracked remediation outcomes
Define and launch security scorecard metrics covering coverage, MTTR, policy exceptions, and high-risk exposure trends
Complete toolchain fit assessment with keep/replace recommendations and rollout plan

Requirements

What you’ll need

7+ years in application security, security engineering, or software engineering with significant security architecture ownership
Proven delivery in cloud-native Azure environments, including AKS, App Services, Entra ID, and Managed Identities
Deep experience with microservice/API security, authentication/authorization, secrets management, and data protection
Strong practical threat modeling and secure design review experience tied to shipped outcomes
Hands-on experience integrating security controls into CI/CD workflows; Azure DevOps preferred
Ability to code and review implementation quality in at least one major backend stack; .NET or Python preferred
Demonstrated ability to drive cross-team adoption, resolve trade-offs, and deliver under business constraints
Applicants must be currently authorized to work in the United States on a full-time basis
Must not require sponsorship for employment visa status now or in the future
Preferred: Financial services or similarly regulated environment experience
Preferred: Kubernetes network policy and runtime hardening depth
Preferred: Experience building security metrics programs and engineering SLAs
Preferred: Background partnering with offensive security and incident response teams

Benefits

Comp & perks

Health insurance
Vision insurance
Dental insurance
Life insurance
401(k) plans
Employee Stock Purchase Plan
Paid vacation time
Paid sick time
Telecommute option, although the role requires in-office work at least 3 days per week