Lead Application Security Architect

FINRA•Rockville, MD

11d•Hybrid

About The Position

The Lead Application Security Architect designs, implements, and oversees enterprise-wide application security architecture and standards. Working independently, this role directs staff and leads strategic security initiatives with broad organizational impact. It establishes security frameworks, conducts architecture reviews, develops security baselines, and embeds security throughout the software development lifecycle, including for emerging Generative AI (GenAI) applications. The position combines deep technical expertise, architectural thinking, and people leadership. The role develops enterprise application security architecture frameworks, reference models, and roadmaps aligned with business objectives and risk tolerance. It maintains secure coding standards and reusable patterns across web, mobile, API, microservices, and GenAI technologies and deployment models, and architects core security capabilities such as authentication, authorization, encryption, secure communication, secure data handling, and API security. The position also establishes architecture patterns and safeguards for GenAI and large language model applications, including retrieval-augmented generation, agentic workflows, and model integration. It leads security control operations and compliance efforts, evaluates security technologies, promotes information security policies and standards, mentors staff, and directs process improvement initiatives. This is a hybrid position with defined in-person presence requirements. Occasional travel and extended hours may be required. Salary ranges vary by listed work location; the position may also include a discretionary bonus. FINRA provides a range of insurance, retirement, reimbursement, commuter, wellness, and paid-leave benefits.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related discipline with at least seven years of related experience, or equivalent training and/or work experience.
Direct experience leading key areas including securing networks and systems architecture, design and implementation; secure software assurance; intrusion detection, defense and incident response; security configuration management; access controls design and implementation; and security policy and standards development.
In-depth knowledge of more than one communications protocol.
Experience managing several cybersecurity tools, including Configuration Assessment, Log Aggregation, Integrity Verification, Web Application Security Testing, Network Access Control System, Network Intrusion Prevention Systems, and Endpoint Security Solutions.
Strong written and verbal technical communication skills.
Demonstrated ability to develop effective working relationships that improve the quality of work products.
Ability to stay organized and thorough while handling competing priorities.
Ability to maintain focus and rapidly develop proficiency in new skills.
Ability to work in a fast-paced environment.
Excellent planning skills.
Willingness to accept new challenges and grasp new or changing concepts, technologies, and procedures.
In-depth knowledge across all areas of Information Security.

Nice To Haves

Master’s degree.
Past Financial Services industry experience.

Responsibilities

Design and establish enterprise application security architecture frameworks, reference models, and roadmaps aligned with business objectives and risk tolerance.
Develop and maintain security baselines, secure coding standards, and reusable patterns across web, mobile, API, microservices, and GenAI technologies and deployment models.
Architect authentication and authorization, encryption at rest and in transit, secure communication, secure data handling, and API security capabilities.
Lead processes to identify, validate, and prioritize security risks; identify deficiencies in security requirements; elicit requirements; and architect and design security controls.
Design security architecture patterns and reference models for GenAI and LLM applications, including RAG, agentic workflows, and model integration.
Define controls for GenAI-specific risks, including prompt injection, insecure output handling, training data poisoning, sensitive information disclosure, model denial of service, and supply chain vulnerabilities.
Architect GenAI guardrails such as input/output validation, content filtering, rate limiting, data loss prevention, and human-in-the-loop controls.
Establish secure-handling standards for prompts, embeddings, vector databases, and model artifacts, including classification, access control, and encryption.
Use GenAI to enhance security architecture reviews and automate security analysis.
Develop and implement strategies to promote consistent use of security controls across the enterprise.
Lead security control operation and monitoring strategies; assess control effectiveness; review, triage, and prioritize control output; and resolve discrepancies.
Lead and champion compliance with internal and external regulations, policies, and standards, and establish strategies to monitor and enforce compliance.
Lead the identification, evaluation, and recommendation of security technologies, techniques, and tools.
Lead the team in defining, reviewing, and promoting information security policies, standards, guidelines, and procedures.
Direct internal process improvement initiatives and provide feedback and suggestions on processes.
Mentor junior staff and contribute to team development.
Participate in external process improvement committees as a security representative.
Provide backup coverage for next-level management, as appropriate.
Collaborate in person and virtually in support of FINRA's mission of investor protection and market integrity.
Adhere to technology policies and security controls; ensure work products meet or exceed FINRA standards; and demonstrate FINRA's values.

Benefits

Comprehensive health, dental, and vision insurance.
Basic life, accidental death and dismemberment, supplemental life, spouse/domestic partner and dependent life, and spouse/domestic partner and dependent accidental death and dismemberment insurance.
Short- and long-term disability, long-term care, business travel accident, and legal insurance.
Immediate participation and vesting in a 401(k) plan with company match.
Eligibility to participate in an additional FINRA-funded retirement contribution.
Tuition reimbursement.
Commuter benefits.
Adoption assistance, backup family care, and surrogacy benefits.
Employee assistance and wellness programs.
Paid time off starting at 15 days and increasing with years of service up to 25 days.
Five personal days and nine sick days, prorated in the first year as applicable.
Two volunteer service days based on a full-time schedule.
Paid military, jury duty, bereavement, voting and election official, family member care, childbirth, and parental leave, subject to stated eligibility and terms.
Nine paid holidays for full-time employees.
Employees may be eligible for a discretionary bonus.
Non-exempt employees are eligible for overtime pay in accordance with applicable law.