Application Security Architect

Role summaryThe Principal Application Security Architect is a hands-on execution leader accountable for delivering application security outcomes across modern cloud-native and legacy enterprise systems. This role owns security delivery end-to-end - from design through production, ensuring high-risk applications ship securely, on time, and at scale. This is a doer role with architectural authority.Primary ResponsibilityOwn delivery of AppSec outcomes for critical applications and platformsLead hands-on threat modelling, architecture reviews, and remediation executionSet and enforce security release gates and acceptance criteriaActively reduce critical and high-risk vulnerabilities through Deep Code reviews, root cause analysis, direct remediation guidanceEnsure development teams understand the importance of application security principlesContinuously liaise with various product teams to analyse application vulnerabilitiesCreate and guide a team of local application security subject matter expertsServe as final technical authority for AppSec decisions on high-stakes initiativesUnblock engineering teams and resolve security-delivery conflictsReport clear, actionable risk status to senior leadershipDevelop organisational processes and methods for security, privacy and related assetsContinuously evaluate vulnerabilities and risks in software platforms, interfaces and applicationsPerform SW Threat modelling, Security Risk Assessment across various technology stacksCreate product security requirements and concepts; promote ‘secure by design’ approachTriage and remediation planning for discovered vulnerabilities aligned to program deadlinesEngage with internal and external partners to ensure alignment to commitmentsMentor SW teams on secure coding, best practices, industry standards, tools, and processesSeek to build-in security during development of software systems and applicationsEnsure that organisational processes stay current; contribute to the Quality Management System