Security Architect - Application Security
Posted Updated
Summary
Hands-on Security Architect role in Wellington owning application security strategy for a technology-driven organisation: threat modelling, security architecture reviews, embedding secure coding across the SDLC, and integrating security tooling into CI/CD. Core stack is C#/.NET, AWS and OAuth/OIDC/SAML, with Terraform, Docker, GitHub Actions and Cloudflare as pluses.
Security Architect - Application Security
Wellington | Permanent | Hands-on Technical Leadership
Are you a software engineer who thinks like a Security Architect?
We're working with an established, technology-driven organisation looking for a hands-on Security Architect to take ownership of its application security strategy and help shape how security is embedded across its software platforms.
This isn't your typical security architecture role focused on infrastructure, policies and compliance.
We're looking for someone who understands how software is built, knows how to identify and address security vulnerabilities, and enjoys working directly with engineering teams to design secure, scalable solutions.
You might already be an Application Security Architect, Product Security Engineer or DevSecOps Lead. Alternatively, you could be a Principal Engineer, Software Architect or Technical Lead with strong C#/.NET experience and a genuine passion for application security.
The opportunity:
You'll play a key role in defining and delivering application security strategy, working closely with architects, developers and engineering teams to embed security throughout the software development lifecycle.
This is a hands-on technical leadership opportunity where you'll influence architectural decisions, introduce security improvements and help build security capability across the organisation.
What you'll be doing:
Ideally, you'll bring:
Why consider this opportunity?
Apply now!
Wellington | Permanent | Hands-on Technical Leadership
Are you a software engineer who thinks like a Security Architect?
We're working with an established, technology-driven organisation looking for a hands-on Security Architect to take ownership of its application security strategy and help shape how security is embedded across its software platforms.
This isn't your typical security architecture role focused on infrastructure, policies and compliance.
We're looking for someone who understands how software is built, knows how to identify and address security vulnerabilities, and enjoys working directly with engineering teams to design secure, scalable solutions.
You might already be an Application Security Architect, Product Security Engineer or DevSecOps Lead. Alternatively, you could be a Principal Engineer, Software Architect or Technical Lead with strong C#/.NET experience and a genuine passion for application security.
The opportunity:
You'll play a key role in defining and delivering application security strategy, working closely with architects, developers and engineering teams to embed security throughout the software development lifecycle.
This is a hands-on technical leadership opportunity where you'll influence architectural decisions, introduce security improvements and help build security capability across the organisation.
What you'll be doing:
- Own and drive application security strategy, standards and roadmap.
- Lead security architecture reviews, threat modelling and secure solution design.
- Work alongside developers to embed secure coding practices and remediate vulnerabilities.
- Strengthen security controls across applications, APIs, authentication and identity management.
- Integrate security tooling and automation into CI/CD pipelines.
- Provide technical guidance across application and cloud security.
- Support security initiatives involving emerging technologies, including AI.
- Mentor engineering teams and champion secure development practices.
Ideally, you'll bring:
- Strong hands-on C#/.NET development experience.
- Solid understanding of application security principles, OWASP Top 10 and secure software design.
- Experience conducting threat modelling and security architecture reviews.
- Knowledge of authentication and identity protocols, including OAuth 2.0, OpenID Connect and SAML.
- Experience with AWS and cloud security principles.
- Understanding of DevSecOps, secure SDLC practices and CI/CD security tooling.
- Ability to influence technical decisions and communicate effectively with engineering teams and stakeholders.
Why consider this opportunity?
- Own the strategy: Take genuine ownership of application security direction and roadmap.
- Stay technical: Work closely with developers and architects rather than stepping away from hands-on engineering.
- Make an impact: Influence how security is designed and embedded across modern software platforms.
- Work with modern technology: Exposure to cloud platforms, automation, application security and emerging technologies.
- Lead through expertise: Be a trusted technical authority without the need for direct people management.
Apply now!
