Application Security Architect (Remote)

About the role

We are looking for an experienced Application Security Architect to join our team remotely. The professional will act as the Information Security representative during project planning and implementation, ensuring security requirements are built into initiatives from inception to deployment.

Key responsibilities

• Conduct security architecture reviews and provide guidance on secure design.
• Perform threat modeling and risk assessments for new and existing applications.
• Deliver Secure SDLC guidance and embed application security controls.
• Define and manage cloud security strategies across AWS, Azure, and GCP.
• Oversee encryption, key management, and vulnerability management programs.

Required profile

• Strong background in Application Security, Security Architecture, or Information Security consulting.
• Proven experience conducting architecture reviews, threat modeling, and risk assessments.
• Familiarity with secure software development practices and major security frameworks (NIST, ISO 27001, CIS Controls, OWASP Top 10).
• Hands‑on experience with cloud security in AWS, Azure or GCP.
• Excellent English communication skills and ability to work fully remote.
• Experience in financial services or other highly regulated sectors is a plus.
• Relevant certifications (CEH, CISSP, OSCP) are advantageous but not mandatory.

Required skills

• Application Security
• Security Architecture
• Threat Modeling
• Risk Assessment
• Secure SDLC
• AWS, Azure, GCP
• Encryption & Key Management
• Vulnerability Management
• NIST, ISO 27001, CIS Controls, OWASP Top 10