Application Security Architect (m/f)
HybridZagreb, Zagreb, Croatia
Zagreb, Zagreb, CroatiaHybridFull Time
Full Time
Job Summary
Define and lead application security strategy while establishing standards, principles, and architectural guidelines across teams. Integrate security into the SDLC through a DevSecOps approach, overseeing SAST, DAST, SCA, and IAST tools. Lead threat modeling activities and manage organizational-level security risks by collaborating with infrastructure, cloud, and compliance teams. Advise development teams on secure design and solution implementation while monitoring emerging threats and vulnerabilities. Promote security awareness and education across the organization within an agile environment.
Required Qualifications
- 7+ years of experience in application security or security architecture
- Experience in defining and implementing security standards and strategies
- Deep understanding of the OWASP Top 10, secure coding practices, and secure design principles
- Experience with modern software development processes (Agile, CI/CD, DevOps, cloud-native environments)
- Hands-on experience with security tools (SAST, DAST, SCA, IAST)
- Experience with threat modeling methodologies (e.g. STRIDE)
- Experience working with cloud platforms (AWS, Azure, or GCP)
- Knowledge of regulatory and security frameworks (ISO 27001, NIST, NIS2/ZKS, CRA, CSA, GDPR)
- Strong communication and facilitation skills
- Ability to think strategically and make sound decisions
Desired Qualifications
- Certifications such as CISSP, CSSLP, or similar
- Experience in mentoring or leading security initiatives
- Good understanding of at least one programming language (Java, .NET, JavaScript, Python, or similar)
- Experience with penetration testing or red teaming activities
- Experience in scaling security practices across complex environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.