AVP, Cyber Application Security Architect

🔥 35 minutes ago

🏖️ New Jersey – Remote

🏖️ New Jersey – Remote

💵 $160k - $195.1k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

EXL

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

🛡️ Insurance

📦 Logistics

💰 $2M Venture Round on 2015-01

Healthcare • Insurance • Logistics

EXL is a business consulting and services firm that focuses on leveraging data to enhance business operations and decision-making. With a strong emphasis on collaboration and adaptability, EXL partners with organizations to address their unique needs and culture while integrating data science and technology solutions. The company's areas of expertise include operations management, decision analytics, digital transformation, and various industries such as healthcare, finance, and insurance. EXL's mission is to help clients drive business evolution and maintain competitive advantage through tailored solutions and effective use of data.

📋 Description

• Serve as the security architecture authority within the architecture organization • Partner with product architects, principal engineers, cloud partners, and business leaders to embed secure-by-design principles into hardware appliances, multi-tenant SaaS platforms, and globally distributed cloud infrastructure • Coach and support developers in writing secure code and using secure patterns, frameworks, and libraries • Provide architecture, implementation, and operational guidance and promote secure-by-default approaches • Triage SAST, SCA, DAST, container, and IaC scanning findings; validate and resolve false positives; and help prioritize true risk • Tune security tools, reduce noise, and improve signal quality through rules, suppressions, baselines, and exception processes • Drive adoption of CNAPP, CWPP, WAF, service mesh security, API gateways, SIEM/SOAR, and cloud-native telemetry • Conduct Secure by Design reviews for new applications and material changes • Lead threat modeling workshops, identify abuse cases and attack paths, and document mitigations and residual risk • Review authentication/authorization, data flows, secrets handling, logging/monitoring, and resiliency controls • Provide recommendations and track follow-through with engineering teams • Translate FedRAMP, SOC2, ISO 27001, NIST SP 800-53, CSA CCM, and SOX requirements into measurable security architecture controls • Advise on CI/CD pipeline hardening, least privilege, artifact integrity, signing, provenance, and secure deployment patterns • Advise on third-party dependency security, supply chain controls, SCA governance, and patch/vulnerability management • Integrate security controls into developer workflows with automation and self-service • Provide security architecture guidance for AI/ML and GenAI-enabled applications • Help implement data protection, access control, monitoring, and abuse-prevention controls for AI/ML features • Act as a trusted partner to product, engineering, and leadership • Create and maintain secure coding guidance, reference architectures, and reusable patterns • Contribute to incident root cause analysis and preventative design improvements

🎯 Requirements

• 8+ years related IT experience • 5+ years' experience in security application tools • 6+ years' experience in application security reviews of new architecture • 5+ years of experience with public and hybrid cloud environments (AWS, Azure and GCP) • Strong software development background with the ability to read, understand, and advise on production code and design decisions • Demonstrated expertise in threat modeling and secure architecture review for modern web and API-based applications • Expertise securing CI/CD and SDLC processes, including pipeline security, secrets management, artifact integrity, build/release controls, and automation • Experience with application security tooling and processes, including SAST/SCA/DAST and related scanning in pipelines • Working knowledge of AI/ML security risks and mitigations for applications using ML models or GenAI components • Strong collaborative and consulting skills; ability to influence without authority, communicate clearly, and deliver pragmatic, developer-friendly recommendations • Bachelor's Degree