Lead Application Security Architect

Raymond James•Saint Petersburg, FL

1d•Hybrid

About The Position

The Raymond James Enterprise Application Security Architecture team is seeking a Lead Security Architect to strengthen the organization’s security posture through secure design reviews, threat modeling, and vulnerability remediation. The role helps ensure applications and systems meet security standards by identifying, analyzing, and mitigating risks and collaborating with development teams to address vulnerabilities in designs and code. It also creates secure reference architectures informed by design reviews and industry best practices. The position follows a hybrid schedule, with three office days per week, including a Monday or Friday, at the St. Petersburg, Florida Corporate Office. Occasional non-standard shifts or on-call work may be required. Travel is less than 25%. The role also covers AI-enabled application security, including using AI and large language models to identify and remediate vulnerabilities and incorporating AI-driven security into design reviews, code reviews, and DevSecOps. Enterprise AI security work includes designing controls for generative AI, AI agents, and Model Context Protocol integrations, with emphasis on sensitive-data protection, access controls, and AI-specific risks. The position requires a bachelor’s degree in Computer and Information Science or Information Technology, or a completed high school education, and six to ten years of general experience. CISSP is listed under licenses/certifications. Financial services experience is a plus, but not required. The role offers a benefits package that may include medical, dental, and vision coverage; life, critical illness, accident, and disability insurance; retirement savings; paid time off; and parental leave. Eligibility and offerings may vary by position and employment status.

Requirements

More than six years of experience in security engineering or architecture, with demonstrated focus on secure design reviews, threat modeling, and vulnerability management.
In-depth knowledge of web application security principles, secure coding practices, and common vulnerabilities such as the OWASP Top 10.
Proficiency designing secure architectures for on-premises and cloud environments, such as AWS and Azure.
Strong understanding of OAuth, authentication, and authorization mechanisms, including multi-factor authentication, single sign-on, and passwordless authentication.
Experience with encryption technologies, including certificate-based and token-based cryptography.
Familiarity with network protocols, network topologies, incident response, and defense-in-depth strategies.
Exceptional communication skills and ability to bridge technical and business stakeholders.
Experience leveraging AI and large language models to identify, analyze, and remediate application security vulnerabilities and integrate AI-driven security into secure design reviews, code reviews, and DevSecOps processes.
Experience designing and implementing enterprise security architectures and controls for generative AI, AI agents, and Model Context Protocol integrations.
Bachelor’s degree in Computer and Information Science or Information Technology, or completed high school education, as listed in the education requirements.
CISSP is listed under licenses/certifications.

Nice To Haves

Financial services experience is a plus but is not required.

Responsibilities

Lead secure design reviews and threat modeling for new applications, features, and architectural changes, ensuring alignment with industry standards, regulatory requirements, and organizational security policies.
Collaborate with development teams to identify and remediate vulnerabilities in application code and system designs, providing hands-on guidance and actionable recommendations.
Create and maintain secure reference architectures aligned with organizational needs and technologies.
Advise development teams on integrating security into the software development lifecycle and promoting secure coding practices.
Assess conformance with architectural standards, reducing technical debt and optimizing enterprise systems, services, and information.
Provide technical expertise on encryption, identity and access management, and secure communication protocols.
Monitor emerging security threats, trends, and best practices and apply relevant insights to strengthen the organization’s security posture.
Collaborate with infrastructure, DevOps tooling, and compliance teams to align security measures with organizational goals and integrate them effectively.
Support security incident response with architectural expertise and defense-in-depth strategies.
Use AI and large language models to identify, analyze, and remediate vulnerabilities in custom-developed applications, including integrating AI-driven security into design reviews, code reviews, and DevSecOps processes.
Design and implement security architectures and controls for enterprise adoption of generative AI, AI agents, and Model Context Protocol integrations, protecting sensitive data, enforcing access controls, and mitigating AI-specific risks.
Perform other assigned duties, including occasional non-standard shifts or on-call work.