Principal Application Security Architect

4w1 month ago

LPL Financial

San Diego, US · Full-time · $168,817 – $281,293

About this role

LPL's Information Security team is seeking a Principal Application Security Architect to engage on API project efforts spanning Cloud, On-prem, and Data security architectures. You will work side by side with Development, Operations, Business units, and Enterprise Architecture teams to secure and monitor environments.

Day-to-day, you will implement robust access control mechanisms including OAuth and JWT, configure API gateway security, and develop reusable security design patterns. You will also craft clear security standards, lead threat modeling and risk assessment, and secure machine learning models against adversarial attacks.

This role thrives in a collaborative environment with cutting-edge resources, where you'll align security initiatives with business objectives. You will partner with key stakeholders to integrate security at all levels, ensuring broad support and enabling business agility.

LPL offers the freedom to make an impact and the ingredients to shape your success while helping clients pursue their financial goals. This position provides the opportunity to drive innovation in security architectures and grow within a forward-thinking financial organization.

Requirements

3+ years of security architecture and API security experience, including designing secure API gateways and microservices architectures
8+ years of experience with information security controls, guidelines, and standards (e.g., ISO27000, OWASP, CSA CCM, CIS 20, SOX, NIST)
Broad technical cloud security background with focus on security design, detection, prevention, and response
Expertise in threat modeling, risk assessment, and vulnerability management across complex enterprise settings
Proficiency in implementing zero-trust architectures and secure DevOps practices
Experience with securing machine learning models and AI/ML pipelines
Strong ability to consult, negotiate, communicate, and build consensus across cross-functional teams
Ability to remain calm under pressure and drive results in a fast-paced environment

Responsibilities

Secure APIs by implementing robust access control mechanisms, OAuth, JWT, and configuring API gateway security to ensure authenticated and authorized access
Develop reusable security design patterns addressing common cybersecurity challenges across diverse technology stacks and business domains
Craft clear, actionable security standards and policies aligned with industry best practices and regulatory requirements
Lead the design and innovation of security architectures, integrating advanced technologies to protect against evolving threats while enabling business agility
Conduct thorough threat analysis using intelligence and analytics to proactively identify and mitigate security risks
Implement and oversee a risk management framework that balances security investments with business needs
Secure machine learning models against adversarial attacks and ensure data privacy in AI training sets
Develop secure AI/ML pipelines including model integrity verification and anomaly detection in AI-driven systems

Benefits

Collaborative environment with cutting-edge resources and tools
Freedom to make an impact and drive meaningful security initiatives
Opportunity to shape your career while helping clients pursue their financial goals
Innovation-driven culture that values initiative and professional growth