Senior Application Security Architect – AppSec

Job not on LinkedIn

🔥 2 hours ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Stone & Company

WebsiteLinkedInAll Job Openings

1 - 10 employees

Stone + Company, a management and strategy consulting firm, enables its corporate clients to deliver top results by transforming fragmented strategies or developing new ones into a cohesive game plan for achieving superior performance and true team alignment, fast.

📋 Description

• Define and implement security strategies for applications, including those that integrate LLMs and generative AI components • Collaborate with development teams to integrate security practices from the start of the software development lifecycle • Conduct architecture, code and design reviews to identify potential vulnerabilities and security issues • Define guardrails and standards for applications using LLMs, addressing risks such as prompt injection, insecure output handling, data leakage via outputs, excessive agent agency, and cost-abuse (denial-of-wallet) • Establish guidelines for the safe use of AI-assisted development tools by engineering teams, balancing productivity, intellectual property protection, and prevention of sensitive data leaks • Develop and promote security standards and best practices across the development organization • Provide technical guidance and security training to development teams • Be familiar with automated quality validation tools in the CI/CD pipeline such as SAST, DAST, SCA and Secret Scanning • Monitor security threat trends and evolutions and continuously update protective measures — including the emerging threat landscape for AI systems • Develop creative solutions for complex security problems that balance business needs and risks • Use your security experience and intuition to hunt for threats in corporate and production environments • Ability to read and communicate in English

🎯 Requirements

• Bachelor’s degree (completed or in progress) in Information Security, Computer Science, Information Systems, Software Engineering or related fields • Ability to identify opportunities for improvement, new solutions and alerts that can benefit and/or facilitate operations • Use influencing and negotiation skills to guide teams to fix issues or adopt security-appropriate architectures • Ability to work independently • Communicate concisely, clearly and assertively, able to translate complex problems into language accessible to the audience you are addressing • Initiative to seek or request information when needed • Passion for learning and thriving in a dynamic, fast-changing environment • Knowledge of common attack vectors • Experience performing threat modeling • Experience with effective mechanisms for protecting APIs and mobile applications • Familiarity with core cloud services and cloud security concepts (AWS, Azure or GCP) • Comfortable working in multidisciplinary teams using agile methodologies • Familiarity with security risks in applications that use LLMs and generative AI (references such as OWASP Top 10 for LLM Applications and MITRE ATLAS)

🏖️ Benefits

• 💸 Fixed salary • 💰 Variable compensation package* (PLR, ILP or commission – provided according to job eligibility, not an optional pick-and-choose model) • 🏥 Health and dental plan with co-pay (except for professionals with disabilities who have no co-pay) • 🩺 Verde Virtual Hospital: 24/7 telemedicine team • 💊 Medication subsidy • 🍽️ Meal allowance and/or food voucher - Pluxee* (except for Commercial Executive positions - 6 hrs) • 👶 Childcare assistance (for children up to 5 years and 11 months) • 💙 Assistance for children with disabilities • 🛡️ Life insurance • ⛽ Fuel allowance or commuting assistance* • 🏠 Home office allowance* (only for Hybrid or Remote contracts) • 🎁 Welcome kit for new parents • 🏢 SESC membership agreement* • 📚 Education benefit – internal self-development platform (Studa and Stone Library) • 🧠 Acolhe360º - Emotional support (free) • 💆 Quick massage and on-site clinic* • Wellhub - TotalPass - Pet Club - Flash - Férias&Co - Commuting Voucher (VT) - Allya - Educational partnerships