Application Security Architect & Engineer Job at Robert Half (Richmond)

Application Security Engineer

In the HPE Hybrid Cloud, we lead the innovation agenda and technology roadmap fo...

Location

India , Hyderabad

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field
5+ years of experience in application security, including hands-on experience with security testing tools and techniques
Strong understanding of web application security concepts, including OWASP Top 10 vulnerabilities and secure coding practices
Experience with security testing tools such as Burp Suite, OWASP ZAP, and code analysis tools like SonarQube or Checkmarx, Snyk
Proficiency in at least one programming language (e.g., Java, Python, JavaScript) and ability to review and understand code
Familiarity with software development methodologies (e.g., Agile, DevOps) and their impact on security practices
Excellent analytical and problem-solving skills, with attention to detail
Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams
Certifications such as CISSP, CEH, or CASE (Java), or equivalent
Demonstrated ability to work independently and prioritize tasks in a fast-paced environment

Job Responsibility

Conduct thorough security assessments of applications, identifying vulnerabilities and weaknesses in code, architecture, and configurations
Collaborate closely with development teams to integrate security best practices into the software development lifecycle (SDLC) and ensure secure coding standards are followed
Perform regular security testing, including static code analysis, dynamic application scanning, and penetration testing, to identify and mitigate security risks
Analyze security incidents and provide timely response and remediation actions to mitigate potential threats
Develop and maintain security documentation, including security requirements, design documents, and security testing reports
Assist in the design and implementation of security controls and mechanisms to protect sensitive data and critical systems
Stay up-to-date with emerging security threats and industry best practices, and recommend security enhancements and controls accordingly
Provide security guidance and support to cross-functional teams, including developers, architects, and project managers
Participate in security reviews and audits, ensuring compliance with security policies, standards, and regulatory requirements
Collaborate with third-party vendors and partners to assess the security posture of integrated systems and applications

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Application Security Engineer / Analyst

Core Responsibilities: Perform Web Application and API Security testing aligned ...

Location

India , Chennai, Bangalore

Salary:

Not provided

AMBC

Expiration Date

Until further notice

Requirements

Perform Web Application and API Security testing aligned with OWASP Top 10 using tools such as Burp Suite, Postman, and Tenable Nessus
Conduct Secure Code Reviews (manual and SAST-based) to identify vulnerabilities in source code and recommend remediation steps
Integrate and validate security controls within CI/CD pipelines for continuous testing and compliance
Assess application, microservice, and infrastructure security gaps, and support teams with remediation planning
Define and review hardening standards, TLS configurations, and integration security controls
Collaborate with developers, architects, and DevOps teams to embed “Shift Left” security practices during SDLC stages
Document findings, prepare detailed security assessment reports, and assist in mitigation validation
Stay updated with emerging threats, vulnerabilities, and security best practices to strengthen product security posture
Work Experience 3 to 6 years

Job Responsibility

Perform Web Application and API Security testing aligned with OWASP Top 10 using tools such as Burp Suite, Postman, and Tenable Nessus
Conduct Secure Code Reviews (manual and SAST-based) to identify vulnerabilities in source code and recommend remediation steps
Integrate and validate security controls within CI/CD pipelines for continuous testing and compliance
Assess application, microservice, and infrastructure security gaps, and support teams with remediation planning
Define and review hardening standards, TLS configurations, and integration security controls
Collaborate with developers, architects, and DevOps teams to embed “Shift Left” security practices during SDLC stages
Document findings, prepare detailed security assessment reports, and assist in mitigation validation
Stay updated with emerging threats, vulnerabilities, and security best practices to strengthen product security posture

AppSec & AI Security Architect

Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or Engineering
10+ years of experience in application or product security architecture, preferably in large enterprise or SaaS environments
Proven expertise in secure application and API design, cloud-native security, and DevSecOps enablement
Proven expertise in secure application and API design, WAAP, and ASPM solutions
Strong experience with Kubernetes (K8s), containerization, and service mesh architectures
Hands-on experience implementing or governing GitOps pipelines and policy-as-code frameworks (e.g., OPA/Gatekeeper, Kyverno)
Knowledge of Zero Trust, data protection, and modern identity standards (OIDC, OAuth2)
Familiarity with AI/ML security risks, model governance, and responsible AI adoption
Deep knowledge of OWASP ASVS, NIST CSF, ISO 27034, and CIS Controls
Desired Certifications: CISSP, CSSLP, SABSA, CCSP, CKA (Certified Kubernetes Administrator), or CCSK.

Job Responsibility

Defining and maintaining secure application architecture patterns, reference designs, and reusable components across enterprise and cloud-native ecosystems
Performing architecture risk assessments and threat modeling for major application programs, APIs, and platforms
Leading adoption of Web Application and API Protection (WAAP) controls and Application Security Posture Management (ASPM) tools to enable continuous risk visibility and compliance
Embedding security controls in SDLC and CI/CD pipelines, including SAST, DAST, SCA, IaC, and container scanning
Designing and governing security for Kubernetes-based and containerized workloads, including service mesh and runtime protection
Developing and enforcing standards for API and microservices security, including authentication, authorization, and token lifecycle management (OAuth2, OIDC, mTLS)
Establishing secure-by-default configurations for CI/CD and GitOps pipelines (e.g., ArgoCD, Flux, Jenkins, GitHub Actions)
Partnering with engineering teams to design secure cloud-native and hybrid architectures across AWS, Azure, and GCP
Providing security guidance for applications leveraging AI/ML or LLM capabilities, such as input/output sanitization, model integrity, and data protection
Establishing application security KPIs, governance models, and maturity metrics

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion.

Fulltime

Security Engineering Lead

Citi's Application, Platform and Engineering team is looking for a Security Engi...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Bring your deep-dive application security engineering expertise from building production systems
thrive in a results-driven environment, where flexibility fuels impact
be a game-changer, ready to step beyond your designated role
love the synergy of pair programming
seize the opportunity to secure AI applications at scale
have a relentless passion to learn more about AI security, LLM attacks, and bringing your knowledge to shape Citi's secure AI future
proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
hands-on experience finding and exploiting vulnerabilities, conducting red team exercises, and thinking like an attacker to strengthen defenses
experience building security tools and secure production systems with Go, Python, JavaScript
deep experience with HashiCorp Vault for enterprise-scale secrets management

Job Responsibility

Build secure AI products
conduct penetration testing and vulnerability research
design automated security solutions
identify and mitigate AI-specific vulnerabilities
lead security practices in development lifecycles
mentor engineers on secure coding practices.

What we offer

27 days annual leave plus bank holidays
discretional annual performance-related bonus
private medical care and life insurance
employee assistance program
pension plan
paid parental leave
special discounts for employees, family, and friends

Fulltime

Principal Security Architect

As a Security Architect, your role involves designing, reviewing, and enhancing ...

Location

United States , San Francisco

Salary:

164000.00 - 290000.00 USD / Year

Ethos

Expiration Date

Until further notice

Requirements

7+ years of experience in Information Security with at least 2 years as a Security Architect
Bachelor’s Degree in Computer Science or related field, or an additional 3 years of pertinent work involvement preferred
Strong knowledge of prevalent security architectures, frameworks, standards and emerging threats along with strategies and technologies for defense
Deep understanding of network protocols, operating systems, databases, applied cryptography, least privilege, zero trust principles, identity & access management, and other core information security concepts
Expertise in cloud computing and its associated best security practices encompassing applications, infrastructure, storage, platforms, and data security
Ability to conduct threat modeling and risk assessments
Ability to come into our San Francisco, CA office once a week

Job Responsibility

Conduct Threat Modeling & Architectural Assessments to cover all Information Security domains to ensure Security by Design
Assess technologies and solutions to develop and enrich security capabilities
Identify security gaps and communicate associated business risks to relevant stakeholders
Craft solutions that harmonize business needs with security and compliance requirements
Verify the effectiveness of security controls in mitigating identified risks
Assist engineering projects across the Software Development Life Cycle (SDLC) and collaborate to prioritize product security elements effectively
Apply expertise in information security and application development to instigate organizational shifts aimed at managing and resolving security weaknesses and vulnerabilities
Contribute to the creation of security policies, standards, and guidelines
Devise and implement frameworks for data classification, retention, and disposal to ensure alignment with data privacy regulations
Spearhead initiatives for data security awareness and training

Fulltime

Senior Information Security Engineer

Serve as a technical leader in our Security team reporting to our Information Se...

Location

United States , Boston

Salary:

150000.00 - 190000.00 USD / Year

Whoop

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related technical field and/or advanced certifications (CISSP, CISM, AWS Security Specialty, SANS, etc.)
8+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity
Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG)
Experience securing AI/ML systems or APIs, including governance of third-party AI integrations and organizational use of AI tools
Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems
Hands-on experience with application security tooling (SAST, SCA, DAST) and embedding secure development practices
Demonstrated leadership in security incident response, investigations, and root cause analysis
Effective communicator with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences
Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment
Experience mentoring engineers and setting operational standards

Job Responsibility

Implement and enhance security controls by leading the deployment, integration, and tuning of solutions such as CNAPP, SIEM, CASB, EDR, DLP, and MDM to maximize effectiveness
Support security design decisions by providing subject matter expertise on cloud and SaaS security best practices while influencing architecture led by the Security Architect role
Lead incident response and investigations by guiding containment, remediation, root cause analysis, and post-incident improvements
Strengthen application security by overseeing secure development practices and managing SAST, SCA, and DAST tooling
Advance identity and access management by supporting IAM policy enforcement, SSO, MFA, SCIM, RBAC, and user lifecycle governance
Secure AI systems and integrations by assessing and protecting embedded APIs and organizational AI tool usage to ensure resilience, privacy, and compliance
Collaborate cross-functionally by working with Engineering, IT, and GRC teams to embed security into systems and workflows
Mentor and influence by providing technical guidance, reviewing work, and promoting security-first thinking across the organization
Stay ahead of threats and regulations by tracking emerging risks, technologies, and compliance requirements to inform forward-looking strategies
Participate in and help improve the on-call rotation by providing guidance, escalation support, and driving improvements in response processes

What we offer

competitive base salaries
meaningful equity
generous equity package

Fulltime

Solutions Architect (Sales Engineer)

As a Solutions Architect at Endor Labs, you're at the heart of connecting our in...

Location

United States , Palo Alto

Salary:

150000.00 - 250000.00 USD / Year

Endor Labs

Expiration Date

Until further notice

Requirements

Experience in pre-sales or a similar customer-facing, technical role
A robust understanding of the Developer, DevOps, Application Security, and open-source ecosystems
Ability to engage with technical customers at an Enterprise level
Curiosity and eagerness to learn
Collaborative spirit
Action-oriented approach

Job Responsibility

Elevate awareness about Application Security and Software Supply Chain Security
Deep dive into our supply chain security product suite and emerge as the go-to expert and evangelist
Showcase our solutions in a way that speaks directly to the needs and challenges of our customers
Collaborate with our engineering and product teams to design solutions that genuinely address customer challenges
Guide customers through onboarding, ensuring a smooth transition and adoption of the Endor Labs solution

What we offer

Competitive salary and comprehensive benefits package including Health, Dental, Vision and Mental Health plans
401(k) plan
Flexible PTO
Opportunities for co-working and team meetups
Dog-friendly office environment

Fulltime

Senior AI Security Engineer

Senior AI Security Engineer role in Citi's Application, Platform and Engineering...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises
State-of-the-art security engineering with Go, Python, JavaScript
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials
Enterprise authentication & authorization - designing and implementing OAuth, JWT, RBAC, and complex identity systems
API security and threat modelling - securing REST/GraphQL APIs, conducting threat assessments
AI/ML security and vulnerability research - understanding of LLM vulnerabilities, model security, prompt injection attacks
Security automation and tooling – automating manual security processes
Cloud-native security - securing containerized applications in Kubernetes, service mesh security
Incident response and forensics - experience investigating, analyzing, and responding to security incidents

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Conduct ethical hacking and red team activities - penetration testing, vulnerability research, and attack simulation
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks
Lead 'shift left' security - Embed security practices throughout rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
Discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Hybrid working model (up to 2 days working at home per week)
Competitive base salary (annually reviewed)

Fulltime

Application Security Architect & Engineer

Robert Half

Location:
United States , Richmond

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
March 13, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Application Security Architect & Engineer

Application Security Engineer

Application Security Engineer / Analyst

AppSec & AI Security Architect

Security Engineering Lead

Principal Security Architect

Senior Information Security Engineer

Solutions Architect (Sales Engineer)

Senior AI Security Engineer

Application Security Architect & Engineer

Robert Half

Location:United States , Richmond

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:March 13, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Application Security Architect & Engineer

Application Security Engineer

Application Security Engineer / Analyst

AppSec & AI Security Architect

Security Engineering Lead

Principal Security Architect

Senior Information Security Engineer

Solutions Architect (Sales Engineer)

Senior AI Security Engineer

Location:
United States , Richmond

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
March 13, 2026