Principal Application Security Engineer/Architect

Description

Principal Application Security Engineer /architect /Team Lead

A hands-on senior expert who leads AppSec strategy, reviews designs, and ensures compliance across multiple engineering teams.

Role Summary

The Application Security Architect is responsible for defining, implementing, and governing security standards across all applications in development. This role ensures that APIs, SDKs, integrations, and microservices adhere to secure design principles and meet regulatory and organizational security requirements.

Key Responsibilities

• Establish and maintain security architecture standards for application development, APIs, and SDK integrations.
• Partner with engineering teams to ensure secure-by-design principles are embedded from concept through deployment.
• Review and approve API designs, authentication flows, encryption requirements, and integration patterns.
• Lead threat modeling for new features, especially those involving external APIs or third-party SDKs.
• Oversee secure coding practices and conduct deep-dive code reviews for high-risk components.
• Define and enforce security requirements across the SDLC, including dependency management and supply-chain security.
• Collaborate with DevOps to ensure secure CI/CD pipelines, secrets management, and infrastructure alignment.
• Evaluate and approve third-party SDKs, libraries, and integrations for security posture.
• Drive remediation of vulnerabilities and ensure compliance with frameworks such as OWASP ASVS, OWASP API Security Top 10, and relevant regulatory standards.
• Mentor engineering teams and act as the senior security authority for application development.

Qualifications

• 8–12+ years in application security, software security, or security architecture.
• Deep expertise in API security, OAuth2, OpenID Connect, JWT, mTLS, and secure integration patterns.
• Strong understanding of cloud-native architectures (AWS/GCP/Azure), microservices, and container security.
• Experience with secure SDLC frameworks and enterprise security governance.
• Ability to influence engineering leadership and drive security strategy across teams.

A major U.S.-based communications and technology provider with

over $500M in annual revenue

and more than

1500 employees

delivers advanced connectivity, mobility, and managed network services to

federal agencies and enterprise clients

. The organization operates a global private network spanning North America, Europe, Asia‑Pacific, and Latin America, supports large‑scale digital transformation initiatives, and maintains a strong online presence through its platform It also runs a dedicated

development center in Israel

, contributing to innovation in SD‑WAN, SASE, IoT, and enterprise mobility solutions including Biling.