Application Security Architect AI

Application Security Architect With AI

Location:

Princeton NJ – Onsite only

Duration:
Contract/Full Time

Core:
Application Security and Vulnerability Management

Role:
Senior Security Consultant (Application Security & AI Governance). Advising enterprise clients on modern App Sec, AI/LLM risk mitigation, and risk-based vulnerability management.

• App Sec Assessments:
  Evaluate client software practices using BSIMM or OWASP SAMM to build maturity roadmaps.
• Threat Modeling:
  Conduct architectural risk assessments and threat modeling workshops for client engineering teams.
• Dev Sec Ops  Pipelines:
  Guide clients on embedding automated security tools (SAST, DAST, SCA) into CI/CD workflows.
• AI Threat Profiling:
  Assess risks unique to GenAI, LLMs, and agentic integrations using frameworks like the OWASP Top 10 for LLMs.
• AI Defenses:
  Design architectural guardrails to prevent prompt injection, data poisoning, and unauthorized data leakage.
• AI Governance:
  Author enterprise policies, risk frameworks, and data privacy controls for corporate AI use.
• Program Modernization:
  Redesign client vulnerability management workflows to shift them from reactive scanning to proactive orchestration.
• Risk Prioritization:
  Establish triage systems utilizing CVSS and EPSS metrics so clients fix high-risk flaws first.
• Tool Selection:
  Act as an independent advisor to help clients select and optimize App Sec Posture Management (ASPM) tools.
• Client Deliverables:
  Produce executive-ready risk reports, technical blueprints, and developer remediation playbooks.

• App Sec Tooling:
  Hands-on experience with enterprise suites like Snyk, Checkmarx, GHAS, Wiz, or Veracode.
• AI Ecosystems:
  Understanding of vector database security, AI orchestration frameworks (Lang Chain), and API security.
• Cloud Architecture:
  Security proficiency across major cloud-native infrastructures (AWS, Azure, or GCP).
• Standards & Frameworks:
  Deep knowledge of OWASP Top 10, ASVS, NIST SSDF, and ISO 27034.

• Experience:
  
  cybersecurity consulting, application security engineering. Vulnerability Management, AI Security
• Education:
  
  Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience.
• Certifications:
  
  CISSP, CSSLP, CCSP, CISA, or specialized AI security credentials preferred.
• Consulting
  
  Skills:
  
  Strong presentation skills to communicate technical risks to both developers and C-level executives.