Security Architect - Application Security
Hands-on Security Architect role in Wellington owning application security strategy for a technology-driven organisation: threat modelling, security architecture reviews, embedding secure coding across the SDLC, and integrating security tooling into CI/CD. Core stack is C#/.NET, AWS and OAuth/OIDC/SAML, with Terraform, Docker, GitHub Actions and Cloudflare as pluses.
- Compensation
- Not disclosed
- Location
- Wellington Central, Wellington
- Work setup
- Hybrid
- Seniority
- Principal
- Employment
- Full time
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Strong hands-on C#/.NET development experience
- Solid understanding of application security principles, OWASP Top 10 and secure software design
- Experience conducting threat modelling and security architecture reviews
- Knowledge of authentication and identity protocols, including OAuth 2.0, OpenID Connect and SAML
- Experience with AWS and cloud security principles
- Understanding of DevSecOps, secure SDLC practices and CI/CD security tooling
- Ability to influence technical decisions and communicate effectively with engineering teams and stakeholders
Nice to have
- Experience with Terraform, Docker, GitHub Actions, Cloudflare or securing AI-powered applications
Full description
**Security Architect - Application Security
Wellington | Permanent | Hands-on Technical Leadership
Are you a software engineer who thinks like a Security Architect?
We're working with an established, technology-driven organisation looking for a hands-on Security Architect to take ownership of its application security strategy and help shape how security is embedded across its software platforms.
This isn't your typical security architecture role focused on infrastructure, policies and compliance.
We're looking for someone who understands how software is built, knows how to identify and address security vulnerabilities, and enjoys working directly with engineering teams to design secure, scalable solutions.
You might already be an Application Security Architect, Product Security Engineer or DevSecOps Lead. Alternatively, you could be a Principal Engineer, Software Architect or Technical Lead with strong C#/.NET experience and a genuine passion for application security.
**The opportunity:
**You'll play a key role in defining and delivering application security strategy, working closely with architects, developers and engineering teams to embed security throughout the software development lifecycle.
This is a hands-on technical leadership opportunity where you'll influence architectural decisions, introduce security improvements and help build security capability across the organisation.
What you'll be doing:
- Own and drive application security strategy, standards and roadmap.
- Lead security architecture reviews, threat modelling and secure solution design.
- Work alongside developers to embed secure coding practices and remediate vulnerabilities.
- Strengthen security controls across applications, APIs, authentication and identity management.
- Integrate security tooling and automation into CI/CD pipelines.
- Provide technical guidance across application and cloud security.
- Support security initiatives involving emerging technologies, including AI.
- Mentor engineering teams and champion secure development practices.
What we're looking for: We're particularly interested in candidates who have a strong software engineering foundation and have developed expertise in application security.
Ideally, you'll bring:
- Strong hands-on C#/.NET development experience.
- Solid understanding of application security principles, OWASP Top 10 and secure software design.
- Experience conducting threat modelling and security architecture reviews.