Application Security Architect with AI -

Job Role - Application Security Architect with AILocation - Princeton NJ(Onsite)Job Type - Contract/Full Time(both Option available)Job Description:Core: Application Security and Vulnerability ManagementRole: Senior Security Consultant (Application Security & AI Governance). Advising enterprise clients on modern AppSec, AI/LLM risk mitigation, and risk-based vulnerability management.Core ResponsibilitiesAppSec Assessments: Evaluate client software practices using BSIMM or OWASP SAMM to build maturity roadmaps.Threat Modeling: Conduct architectural risk assessments and threat modeling workshops for client engineering teams.DevSecOps Pipelines: Guide clients on embedding automated security tools (SAST, DAST, SCA) into CI/CD workflows.AI Threat Profiling: Assess risks unique to GenAI, LLMs, and agentic integrations using frameworks like the OWASP Top 10 for LLMs.AI Defenses: Design architectural guardrails to prevent prompt injection, data poisoning, and unauthorized data leakage.AI Governance: Author enterprise policies, risk frameworks, and data privacy controls for corporate AI use.Program Modernization: Redesign client vulnerability management workflows to shift them from reactive scanning to proactive orchestration.Risk Prioritization: Establish triage systems utilizing CVSS and EPSS metrics so clients fix high-risk flaws first.Tool Selection: Act as an independent advisor to help clients select and optimize AppSec Posture Management (ASPM) tools.Client Deliverables: Produce executive-ready risk reports, technical blueprints, and developer remediation playbooks. [1, 2, 3]Required Technical SkillsAppSec Tooling: Hands-on experience with enterprise suites like Snyk, Checkmarx, GHAS, Wiz, or Veracode.AI Ecosystems: Understanding of vector database security, AI orchestration frameworks (LangChain), and API security.Cloud Architecture: Security proficiency across major cloud-native infrastructures (AWS, Azure, or GCP).Standards & Frameworks: Deep knowledge of OWASP Top 10, ASVS, NIST SSDF, and ISO 27034.Experience & QualificationsExperience: cybersecurity consulting, application security engineering.Vulnerability Management, AI SecurityEducation: Bachelor’s degree in Cybersecurity, Computer Science, or equivalent practical experience.Certifications: CISSP, CSSLP, CCSP, CISA, or specialized AI security credentials preferred.Consulting Skills: Strong presentation skills to communicate technical risks to both developers and C-level executives.