InvestCloud
Application Security Architect
- Compensation
- Not disclosed
- Location
- United States
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Full time
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- You hold yourself to a world-class standard, and it shows in everything you deliver.
- You are a self-starter. You find the work that matters and finish it without being asked.
- You care about this field beyond the job description. You keep learning and building on your own because you enjoy it, and you put in the extra effort when the mission calls for it.
- You bring drive, ambition, and a positive attitude to hard problems.
- You make the people around you better. You share what you know, you never make anyone feel small, and you let your work speak for itself.
Nice to have
- Contributions to open-source security tools, conference talks, or published research.
- Experience in financial services or another regulated SaaS business.
- Experience building security controls as policy as code.
Full description
We are looking for an Application Security Architect who thinks like a developer and builds like one. You will design and lead our application security program, with Wiz as our primary platform, and automate security into every step of how we build and ship software. You understand where software development is heading, including AI-assisted coding, and you help our developers get there faster and more safely. Developers should want to learn from you.
What You Will Do
- Build and lead a world-class application security program, with Wiz as the core platform.
- Automate security across the software development life cycle (SDLC), including code scanning, open-source dependency checks, secrets detection, container and infrastructure-as-code scanning, and release gates.
- Design the security model for AI-assisted development, including guardrails for AI coding agents, review of AI-generated code, and protection of secrets and data.
- Lead threat modeling and secure design reviews for new products and features.
- Find and design out weaknesses, vulnerabilities, and misconfigurations before they reach production.
- Recommend and integrate other tools where they close a real gap that Wiz does not cover.
- Make findings accurate, prioritized, and delivered inside the tools developers already use.
- Lead and mentor our AppSec team, and partner with our Cloud and AI Security Architects.
What Success Looks Like in Your First Year
- A world-class application security program runs on Wiz, with security checks automated at every step of building and releasing software.
- Developers fix issues quickly because findings are accurate, prioritized, and appear in the tools they already use.
- Developers move faster with AI coding tools and do it safely because this person designed the guardrails.
- Developers seek this person out for advice and see security as a partner.
What You Bring
- Eight or more years of experience across software development and application security, including hands-on experience writing production code.
- Hands-on expertise with Wiz, including its code, pipeline, and cloud-to-code capabilities, and a desire to build a program around it.
- Deep knowledge of modern build pipelines, such as GitHub, GitLab, Azure DevOps, or similar platforms, and how to automate security in them without slowing developers down.
- Daily, hands-on use of AI coding tools such as Claude Code, Cursor, or GitHub Copilot, along with a clear point of view on securing them.