Senior Application Security Architect

State Street

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Quincy, MAPrinceton, NJBerwyn, PAClifton, NJAustin, TX
Salary
$120,000–$202,500 / yr
Employment
Full-time
Posted
113 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $184k
This role $161k
$107k $246k
below market most similar roles pay here above market

This role pays less than 65% of similar roles. Most pay $151,231–$216,000 — the blue band above. At the midpoint, this role pays about $161k versus about $184k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 335 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 182 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Senior Application Security Architect

The Senior Application Security Architect joins the Security Architecture organization to design, review, and govern security architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems. This role involves defining security standards, conducting threat modeling, and performing design assessments to embed secure-by-design principles throughout the software and AI development lifecycles. You will partner with engineering and data science teams to address risks associated with LLMs, agentic AI systems, prompt injection, and model misuse. Key technical requirements include expertise in Kubernetes, containers, microservices, and CI/CD pipelines, alongside proficiency in SAST, DAST, IAST, and software composition analysis. You will ensure data protection and secure coding practices across cloud, SaaS, and hybrid environments while managing security requirements for emerging technologies and third-party AI services.

What you'll do

  • Design and review secure architectures for enterprise applications, APIs, cloud-native platforms, and AI-enabled systems.
  • Define and maintain application security standards, architecture patterns, and security requirements.
  • Conduct security architecture reviews, threat modeling exercises, and design assessments for AI and software solutions.
  • Embed security controls throughout the software and AI development lifecycles.
  • Assess security risks associated with AI models, training data, prompts, agents, and third-party services.
  • Drive adoption of secure-by-design, Zero Trust, DevSecOps, and AI security best practices across the enterprise.
  • Evaluate emerging application security threats, technologies, and industry standards.

What we're looking for

  • Degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related discipline.
  • 14 years or more of experience in application security, software engineering, security architecture, AI security, or related technology disciplines.
  • At least 8 years of hands-on cybersecurity experience (preferred).
  • Demonstrated experience designing and securing enterprise-scale applications across cloud, SaaS, hybrid, and on-premises environments.
  • Deep expertise in secure software development lifecycle (SSDLC), OWASP Top 10, API security, secure coding, and application security testing.
  • Strong understanding of AI/ML architectures, LLMs, RAG, agentic systems, model security, prompt security, and responsible AI principles.
  • Experience with cloud-native technologies, containers, Kubernetes, CI/CD pipelines, DevSecOps, and Infrastructure as Code (IaC).
  • Professional certifications such as CISSP, CSSLP, CCSP, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, or AI Security (preferred).

More like this

Similar roles

Senior Cloud Security Architect

State Street

Quincy, MA +3 40 days ago
AWS Microsoft Azure Google Cloud Platform Kubernetes Containers Infrastructure as Code CI/CD DevSecOps Identity and Access Management Network Security Data Protection Encryption Zero Trust SaaS Cloud Security Architecture TOGAF SABSA
10+ yrs exp Hybrid

Senior Data Security Architect

State Street

Quincy, MA +4 113 days ago
Data Security Architecture AWS Microsoft Azure Google Cloud Platform KMS PKI Encryption Tokenization Data Masking Secrets Management Data Governance Data Lakes SaaS Threat Modeling Risk Assessment CISSP CCSP CDPSE CIPP SABSA TOGAF
10+ yrs exp Hybrid

Senior Network Security Architect

State Street

Quincy, MA +3 37 days ago
Network Security Architecture Zero Trust AWS Azure Google Cloud Platform Firewalls IDS/IPS DNS Security DDoS Protection SASE ZTNA Micro-segmentation TCP/IP Routing Switching Load Balancing Encryption Threat Modeling
10+ yrs exp Hybrid

Cloud Security Architect, Senior

Booz Allen Hamilton

Chantilly, VA +1 7 days ago $86,800–$198,000
Cloud Security Risk Management Framework (RMF) Information Assurance Agile Jira SDLC Security+ CE SSCP CCNA-Security GSEC System Security Plans Information Technology (IT)
3+ yrs exp

Senior Application Security Engineer

Arch Capital Group

Farmington, CT 18 days ago $127,000–$172,000
Application Security SAST DAST SCA CI/CD DevSecOps AWS Azure Containers Serverless Threat Modeling NIST OWASP MITRE SDLC Vulnerability Management
5+ yrs exp Hybrid

Application Security Analyst

Booz Allen Hamilton

McLean, VA 8 days ago $86,800–$198,000
SAST DAST IAST DevSecOps CI/CD OWASP Top 10 AWS Azure Google Cloud Platform Kubernetes Python Java C# JavaScript GitHub Selenium Threat Modeling Secret Scanning
5+ yrs exp