Lead Application Security Architect

To elevate and unify our application security program at Arrive. Your mission is to be a force-multiplier for our engineering teams, fostering a secure development culture that is built on a foundation of clear global standards, strong partnerships, and modern security practices. You will ensure that security is a shared goal and a collective achievement.

Key Responsibilities

Act as a lead security consultant and strategic partner for product and engineering teams, providing expert guidance on secure design patterns and vulnerability remediation.

Forge a dynamic partnership with the Platform Security team: co-design the security tooling roadmap, consume their platforms where they meet global standards, and introduce new architectural patterns where needed.

Lead security architecture reviews and threat modeling sessions for new applications and high-risk features.

Act as a senior mentor and advocate for security engineers and champions across the organization, helping to grow our security talent.

Stay at the forefront of emerging application security threats, with a particular focus on the risks associated with AI/ML systems.

Collaborate with Data & AI teams to develop security principles and architectural patterns for securely integrating AI into our products.

Drive innovation in our security practices, continuously seeking opportunities to automate and improve the effectiveness of our AppSec program.

Lead the strategy for leveraging AI within the AppSec program, both to mature the SSDLC and to establish the secure-by-design principles required for our AI-first engineering landscape.

Deep AppSec Expertise: Extensive, hands-on experience in application security, with mastery of the SSDLC, secure coding principles, and common vulnerability classes (OWASP Top 10, etc.).

A Builder of Standards: Proven experience creating, documenting, and rolling out security standards, patterns, and best practices in a complex engineering environment.

A Unifier and Partner: Exceptional ability to foster collaboration and influence engineering teams without direct authority. You build bridges, operate "together," and break down silos.

Strategic Thinker: Ability to see the big picture, define a long-term strategy for application security, and translate it into an actionable plan.

Modern Technologist: Strong understanding of modern software development practices, including cloud-native architectures, CI/CD pipelines, containerization, and Infrastructure as Code.

Be the global leader and define the future of application security at a mission-driven, transformative company.

Operate as a senior expert within a strategic architecture team, with a broad mandate to influence security across all of Arrive’s products.

Work at the cutting edge of securing technology, including multi-cloud and AI-driven mobility solutions.

Arrive, including brands like EasyPark, Flowbird, RingGo, ParkMobile and Parkopedia, is a leading global mobility platform. Present in over 90 countries and 20,000 cities, the company helps people and decision-makers make smarter decisions about urban mobility and ease the experience of travel worldwide. Arrive delivers a unique combination of the core ingredients to make cities more livable: from smart payments and optimized car parks to data-driven traffic reduction and support for reinvestment in public transport and green space. It’s about more than function, it’s about saving time and simplifying the experience of travel for everyone. Travel is more than a journey, it’s how you Arrive.