Lead Application Security Architect

We’ve signed up for an ambitious journey. Join us!

As Arrive, we guide customers and communities towards brighter futures and more livable cities, it isn’t a challenge just anyone could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and Together.

Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For ourselves. As a global team, we are transforming urban mobility. Let’s grow better together.

The Application Security Architect is a senior, influential role responsible for orchestrating and leading Arrive’s global application security strategy. As a core member of the Global Security Architecture & Engineering team, you will act as the central driver for how we securely design, build, and deploy software across the company.

Your primary focus is to unite our efforts by creating, standardizing, and scaling our Secure Software Development Lifecycle (SSDLC) globally. This involves building upon the expertise and best practices that already exist within our teams and forging a powerful partnership with the Platform Security team in Engineering. You will lead by unifying—setting global standards that empower our developers and security engineers and ensuring the security of our next generation of products and platforms.

To elevate and unify our application security program r mission is to be a force-multiplier for our engineering teams, fostering a secure development culture that is built on a foundation of clear global standards, strong partnerships, and modern security practices. You will ensure that security is a shared goal and a collective achievement.

Application Security Strategy & Standards

• Champion and orchestrate the definition of Arrive’s global Secure Software Development Lifecycle (SSDLC), from threat modeling to secure release, in close partnership with key stakeholders across Engineering and IT.
• Develop and maintain a comprehensive set of global security standards, baselines, and guidelines for secure coding, vulnerability management, and secure architecture.
• Create and champion the strategy for our application security tooling, including SAST, DAST, IAST, and Software Composition Analysis (SCA).
• Define and manage the application security standards for Mergers & Acquisitions, establishing clear requirements and guiding the architectural integration of acquired technologies.

Technical Partnership & Enablement

• Act as a lead security consultant and strategic partner for product and engineering teams, providing expert guidance on secure design patterns and vulnerability remediation.
• Forge a dynamic partnership with the Platform Security team: co-design the security tooling roadmap, consume their platforms where they meet global standards, and introduce new architectural patterns where needed.
• Lead security architecture reviews and threat modeling sessions for new applications and high‑risk features.
• Act as a senior mentor and advocate for security engineers and champions across the organization, helping to grow our security talent.

Emerging Threats & Innovation

• Stay at the forefront of emerging application security threats, with a particular focus on the risks associated with AI/ML systems.
• Collaborate with Data & AI teams to develop security principles and architectural patterns for securely integrating AI into our products.
• Drive innovation in our security practices, continuously seeking opportunities to automate and improve the effectiveness of our App Sec program.
• Lead the strategy for leveraging AI within the App Sec program, both to mature the SSDLC and to establish the secure‑by‑design principles required for our AI‑first engineering landscape.

• Deep App Sec Expertise:
  Extensive, hands‑on experience in application security, with mastery of the SSDLC, secure coding principles, and common vulnerability classes (OWASP Top 10, etc.).
• A Builder of Standards:
  Proven experience creating,…