Lead Application Security Architect

FINRA•Rockville, MD

12d•$114,200 - $248,700•Hybrid

About The Position

The Lead Application Security Architect designs, implements, and oversees enterprise-wide application security architecture and standards. Working independently, this role directs staff and leads strategic security initiatives with broad organizational impact. The position establishes security frameworks, conducts architecture reviews, develops security baselines, and embeds security throughout the software development lifecycle, including for emerging Generative AI (GenAI) applications. It combines deep technical expertise, architectural thinking, and people leadership, requiring the ability to manage multiple priorities. The role develops application security architecture frameworks, reference models, roadmaps, secure coding standards, and reusable patterns across web, mobile, API, microservices, and GenAI technologies. It architects core security capabilities and API security strategies; identifies and prioritizes security risks and requirements; and designs security controls. For GenAI and LLM applications, it defines security patterns and controls for risks such as prompt injection, sensitive information disclosure, and supply chain vulnerabilities, and establishes guardrails and standards for handling prompts, embeddings, vector databases, and model artifacts. The Lead Application Security Architect promotes consistent enterprise security controls, oversees their operation and monitoring, resolves discrepancies, and champions regulatory, policy, and standards compliance. The position evaluates security technologies and leads the development and promotion of information security policies, standards, guidelines, and procedures. It also directs process improvement, mentors junior staff, participates in external committees as a security representative, and provides backup coverage for next-level management as appropriate. The role collaborates in person and virtually in support of FINRA’s mission of investor protection and market integrity, while meeting FINRA’s technology, security, quality, and values standards. The position is based in a hybrid work environment with defined in-person presence requirements. Occasional travel and extended hours may be required. Salary ranges vary by listed work location; actual compensation depends on factors including skills, experience, education, and market considerations. Employees may be eligible for a discretionary bonus.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related discipline with at least seven years of related experience, or equivalent training and/or work experience.
Direct experience leading key areas such as securing networks and systems architecture, design and implementation, secure software assurance, intrusion detection, defense and incident response, security configuration management, access controls design and implementation, and security policy and standards development.
In-depth knowledge of more than one communications protocol.
Experience managing several cybersecurity tools, including Configuration Assessment, Log Aggregation, Integrity Verification, Web Application Security Testing, Network Access Control System, Network Intrusion Prevention Systems, and Endpoint Security Solutions.
Strong written and verbal technical communication skills.
Demonstrated ability to develop effective working relationships that improve the quality of work products.
Ability to stay organized and thorough while handling competing priorities.
Ability to maintain focus and rapidly develop proficiency in new skills.
Ability to work in a fast-paced environment.
Excellent planning skills.
Willingness to accept new challenges and grasp new or changing concepts, technologies, and procedures.
In-depth knowledge across all areas of Information Security.

Nice To Haves

Master’s degree.
Past experience in the financial services industry.

Responsibilities

Design and establish enterprise application security architecture frameworks, reference models, and roadmaps aligned with business objectives and risk tolerance.
Develop and maintain security baselines, secure coding standards, and reusable patterns across technology stacks and deployment models, scaled to data classification and risk profile.
Architect authentication and authorization, encryption at rest and in transit, secure communication, and secure data-handling capabilities.
Design API security strategies, including OAuth/OIDC flows, API gateways, and rate limiting.
Lead processes to identify, validate, and prioritize application security risks; identify deficiencies in security requirements, elicit requirements, and architect and design security controls.
Design security architecture patterns and reference models for GenAI and LLM applications, including RAG, agentic workflows, and model integration.
Define controls for GenAI-specific risks and architect guardrails, including input/output validation, content filtering, rate limiting, data loss prevention, and human-in-the-loop controls.
Establish standards for secure handling of prompts, embeddings, vector databases, and model artifacts, including classification, access control, and encryption.
Leverage GenAI to enhance security architecture reviews and automate security analysis.
Develop and implement strategies that promote consistent use of enterprise security controls.
Lead the operation and monitoring of security controls; establish and promote control operation and monitoring strategies.
Ensure controls operate effectively; resolve discrepancies and review, triage, and prioritize control output; take appropriate action to resolve security discrepancies.
Lead and champion efforts to enforce and monitor compliance with internal and external regulations, policies, and standards.
Lead identification, evaluation, and recommendation of new security technologies, techniques, and tools.
Lead the team in defining, reviewing, and promoting information security policies, standards, guidelines, and procedures.
Direct internal process improvement initiatives and provide feedback and suggestions on processes.
Mentor junior staff and contribute to team development.
Participate in external process improvement committees as a security representative.
Provide backup coverage for next-level management, as appropriate.
Collaborate in person and virtually in furtherance of FINRA’s mission of investor protection and market integrity.
Adhere to technology policies and security controls, ensure work products meet or exceed FINRA standards, and demonstrate FINRA’s values.

Benefits

Discretionary bonus may be available in addition to base pay.
Comprehensive health, dental, and vision insurance.
Basic life, accidental death and dismemberment, supplemental life, spouse/domestic partner and dependent life, and spouse/domestic partner and dependent accidental death and dismemberment insurance.
Short- and long-term disability, long-term care, business travel accident, and legal insurance.
Immediate participation and vesting in a 401(k) plan with company match.
Eligibility to participate in an additional FINRA-funded retirement contribution.
Tuition reimbursement.
Commuter benefits.
Adoption assistance, backup family care, surrogacy benefits, employee assistance, and wellness programs.
Paid time off starting at 15 days and increasing with years of service up to 25 days.
Five personal days and nine sick days, prorated in the first year as applicable.
Two volunteer service days based on a full-time schedule.
Paid military, jury duty, bereavement, voting and election official, family member care, childbirth, and parental leave, subject to stated eligibility and conditions.
Nine paid holidays for full-time employees.