Application Security Architect
About The Position
InvestCloud is seeking an Application Security Architect to design and lead its application security program, using Wiz as the primary platform and automating security throughout software development and release. The role calls for a developer-minded security leader who can help teams adopt AI-assisted coding safely and make security a practical partner to developers. The architect will establish secure development practices, integrate automated checks into build pipelines, lead threat modeling and secure design reviews, and work with AppSec, Cloud Security, and AI Security colleagues. Success includes delivering accurate, prioritized findings in developers’ existing tools, enabling developers to resolve issues quickly, and designing guardrails that let teams use AI coding tools safely. InvestCloud’s security team spans the United States, Romania, and India and protects platforms used by banks and wealth managers. The company describes a high-standard, collaborative culture that values ownership, continuous learning, respectful partnership, and quality of work.
Requirements
- Eight or more years of experience across software development and application security, including hands-on experience writing production code.
- Hands-on expertise with Wiz, including its code, pipeline, and cloud-to-code capabilities.
- Deep knowledge of modern build pipelines such as GitHub, GitLab, Azure DevOps, or similar platforms, and how to automate security without slowing developers down.
- Daily, hands-on use of AI coding tools such as Claude Code, Cursor, or GitHub Copilot, and a clear point of view on securing them.
- Strong threat modeling skills and command of the OWASP Top 10, including the OWASP Top 10 for Large Language Model Applications.
- Experience securing cloud-native applications, containers, and APIs.
- Ability to lead through credibility rather than authority.
Nice To Haves
- Contributions to open-source security tools, conference talks, or published research.
- Experience in financial services or another regulated SaaS business.
- Experience building security controls as policy as code.
Responsibilities
- Build and lead an application security program with Wiz as its core platform.
- Automate security across the software development life cycle, including code scanning, open-source dependency checks, secrets detection, container and infrastructure-as-code scanning, and release gates.
- Design security controls for AI-assisted development, including guardrails for AI coding agents, reviews of AI-generated code, and protection of secrets and data.
- Lead threat modeling and secure design reviews for new products and features.
- Identify and design out weaknesses, vulnerabilities, and misconfigurations before production.
- Recommend and integrate additional tools when they address gaps not covered by Wiz.
- Ensure findings are accurate, prioritized, and delivered through tools developers already use.
- Lead and mentor the AppSec team and partner with Cloud and AI Security Architects.
Benefits
- Medical/Rx insurance
- Dental insurance
- Vision insurance
- Disability insurance
- Life and AD&D insurance
- Flexible Savings Account (FSA)
- Health Savings Account (HSA)
- Employee Assistance Plan (EAP)
- Health advocacy
- Voluntary ancillary plans, including accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance
- 401(k) retirement savings plan with company match
- Paid time off
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
