Lead Application Security Architect (AI)

Location: Hybrid in the Saint Petersburg, Florida corporate office, with three in-office days per week including Monday or Friday

Company

hirify.global is a financial services firm focused on client-first service, integrity, independence, and long-term responsibility.

What you will do

• Lead secure design reviews and threat-modeling exercises for applications, features, and architectural changes.
• Identify and remediate vulnerabilities in application code and system designs with development teams.
• Create and maintain secure reference architectures for on-premises and cloud systems.
• Advise development teams on secure coding, software development lifecycle security, and architectural standards.
• Provide expertise in encryption, identity and access management, secure communication protocols, incident response, and defense-in-depth.
• Collaborate with infrastructure, DevOps tooling, compliance, and other cross-functional teams; support security incident response and occasional on-call or non-standard shifts.

Requirements

• More than six years of experience in security engineering or architecture, focused on secure design reviews, threat modeling, and vulnerability management.
• In-depth knowledge of web application security, secure coding, and common vulnerabilities including OWASP Top 10.
• Experience designing secure architectures for on-premises and cloud environments such as AWS and Azure.
• Strong understanding of OAuth, authentication, authorization, multi-factor authentication, single sign-on, and passwordless authentication.
• Experience with certificate-based and token-based cryptography, network protocols and topologies, incident response, and defense-in-depth strategies.
• Experience using AI and large language models to identify, analyze, and remediate vulnerabilities in custom applications and to integrate AI security into design reviews, code reviews, and DevSecOps.
• Experience designing enterprise AI security controls for generative AI, AI agents, and Model Context Protocol integrations, including sensitive-data protection, access control, and mitigation of AI-specific risks.
• Exceptional communication skills for bridging technical and business stakeholders; the ability to quickly acquire relevant business acumen is required.
• Bachelor’s degree completed in Computer and Information Science or Information Technology, or completed high school education as specified; CISSP certification required.

Nice to have

• Financial services experience.

Culture & Benefits

• Hybrid-friendly schedule with flexibility and collaboration through regular office attendance.
• Benefits may include medical, dental, vision, life, critical illness, accident and disability insurance, retirement savings, paid vacation, holidays, sick leave, and parental leave.
• People-first culture emphasizing professional growth, collaboration, pragmatic decisions, accountability, continuous improvement, integrity, and inclusion.
• Travel is expected to be less than 25%.