Application Security Architect

Lead secure application design and embed security across the SDLC — from threat modeling to CI/CD.

Lead secure application design and support development teams throughout the SDLC. You'll integrate and optimize security controls such as SAST, DAST, SCA, and secrets scanning within CI/CD pipelines, review security findings, perform threat modeling, and work with engineering teams to prioritize and implement effective mitigations.

What you'll do

• Design and review secure application architectures across web, API, microservices, and AI-enabled environments.
• Perform threat modeling and hands-on security reviews focused on the OWASP Top 10, API risks, business logic flaws, and data exposure.
• Review application code, architecture, and security controls to identify practical risks and remediation paths.
• Help engineering teams embed security into the SDLC, including SAST, DAST, SCA, and CI/CD security controls.
• Translate technical vulnerabilities into clear business risks for product, engineering, and executive stakeholders.

What you bring

• 4+ years in cybersecurity, with strong application security or secure software development experience.
• Proven experience designing secure application architectures and reviewing complex application ecosystems.
• Ability to audit code in at least one programming language.
• Hands-on experience with threat modeling methodologies, such as STRIDE.
• Experience with SAST, DAST, SCA, findings triage, and guiding engineers through remediation.
• Strong understanding of modern application stacks, including APIs, microservices, cloud-native applications, and AI/LLM integrations.
• Excellent communication skills with engineers, product teams, and leadership.

Why join Moveo

You'll play a critical role in embedding security into how we build software — partnering closely with engineering and leadership to protect our products and our clients' trust, in a fast-paced, tech-forward environment.