Senior Application Security Architect

State Street

Senior Application Security Architect at State Street designing secure solutions for enterprise applications. Collaborating with teams to ensure security in software and AI development lifecycles.

Posted 7/9/2026full-timeQuincy • Massachusetts, New Jersey, Pennsylvania, Texas • 🇺🇸 United StatesSenior💰 $120,000 - $202,500 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityKubernetes

About the role

Key responsibilities & impact

Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, AI-enabled systems, and emerging technologies
Define and maintain application security and AI security standards, architecture patterns, and security requirements
Conduct security architecture reviews, threat modeling exercises, and design assessments for applications, APIs, and AI solutions
Partner with application development, cloud engineering, AI engineering, and cybersecurity teams to embed security controls throughout the software and AI development lifecycles
Provide subject matter expertise in secure coding, application security testing, API security, authentication, authorization, AI security, and data protection
Assess security risks associated with applications, AI models, training data, prompts, agents, integrations, and third-party AI services
Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise
Evaluate emerging application security and AI security threats, technologies, and industry standards

Requirements

What you’ll need

Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline
14 years or more of experience in application security, software engineering, security architecture, AI security, or related technology disciplines with at least 8 years of hands-on cybersecurity experience preferred
Demonstrated experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid, and on-premises environments
Deep expertise in secure software development lifecycle (SSDLC), OWASP Top 10, API security, secure coding practices, and application security testing methodologies
Strong understanding of AI/ML architectures, LLMs, Retrieval-Augmented Generation (RAG), agentic systems, model security, prompt security, and responsible AI principles
Experience with cloud-native technologies, containers, Kubernetes, CI/CD pipelines, DevSecOps practices, and Infrastructure as Code (IaC)
Experience conducting threat modeling, architecture reviews, penetration test remediation, and risk assessments for applications and AI-enabled solutions
Familiarity with SAST, DAST, IAST, software composition analysis (SCA), API security testing, model validation, and AI security assessment techniques
Professional certifications such as CISSP, CSSLP, CCSP, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, AI Security, or equivalent certifications are highly desirable
Experience within financial services or other highly regulated industries is preferred

Benefits

Comp & perks

our retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
eligibility for certain tax advantaged savings plans

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Secure Coding PracticesApplication Security TestingAPI SecurityCloud-Native TechnologiesKubernetesCI/CD PipelinesInfrastructure as Code (IaC)OWASP Top 10Model SecurityRisk Assessment

Certifications

CISSPCSSLPCCSPTOGAFSABSAAWS Security SpecialtyAzure Security Engineer