{"id":3412301,"url":"https://alion.io/job/servicelink-application-security-architect-information-technology","title":"Application Security Architect, Information Technology","company":{"id":2938110,"name":"ServiceLink","domain":"servicelink.com","url":"https://alion.io/company/servicelink","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":112000,"max_usd":223000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure Cosmos DB","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Chaos Engineering","optional":false},{"name":"CI/CD","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C#","optional":true}],"status":"live","first_seen_at":"2026-10-28T18:19:51Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-01T08:49:30Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Overview\nServiceLink is seeking a builder-leader who combines strong application architecture judgment with hands-on execution. This role owns the secure architecture direction for a large, cloud-native financial services platform on Azure handling sensitive customer data and is expected to personally implement key controls while leading others to scale.\nSuccess means reducing real risk in production systems through shipped controls, faster secure delivery, and measurable coverage improvements.\nServiceLink is modernizing the mortgage services industry through AI-accelerated engineering, intelligent automation, and next-generation software delivery practices. We empower the nation's top lenders and financial institutions with advanced technology, data-driven insights, and high-velocity product development models.\nWe're not just evolving legacy workflows - we're redefining how software is designed, built, tested, and deployed. Generative AI, autonomous systems, and continuous delivery are core to how we operate. Innovation isn't optional here - it's the expectation.\nIf you’re passionate about transforming engineering organizations and operationalizing AI-driven development models at enterprise scale, you’ll thrive at ServiceLink.\nThis is a hybrid role, and will be required to work in-office at our Plano, TX office at least 3 days per week. Candidates must be located within reasonable commuting distance of this office and be willing to work in-office on a regular basis.\nApplicants must be currently authorized to work in the United States on a full-time basis and must not require sponsorship for employment visa status now or in the future.\nA DAY IN THE LIFE\nIn this role, you will…\nOPERATING MODEL (EXPECTED TIME SPLIT)\n50% hands-on engineering: build reference implementations, improve pipelines, validate controls in real services\n30% technical leadership: architecture decisions, threat modeling, secure design reviews, backlog direction\n20% enablement and communication: standards, coaching, leadership reporting, audit-ready evidence\nOUTCOMES YOU OWN\nSecure-by-default patterns are adopted across .NET, Python, and SPA services\nHigh-risk authN/authZ and PII exposure paths are identified and remediated\nIdentity-first service-to-service architecture is operationalized (managed identities, token patterns, least privilege)\nSecurity testing and policy checks are integrated into CI/CD with clear ownership and SLAs\nSecurity posture is measurable with trendable metrics, not one-time reports\nResponsibilities\nBuild and publish production-ready security reference architectures and reusable templates\nLead threat modeling and design reviews for new and materially changed services\nOwn RBAC and authorization architecture, including endpoint-to-data classification and least-privilege mapping\nDesign and drive managed identity adoption for SQL, Cosmos DB, and service-to-service communication\nImplement container and Kubernetes hardening controls, including image trust, patch cadence, and egress guardrails\nEvaluate and tune SAST, SCA, DAST, IaC, container, and secret scanning against real codebases and deployment patterns\nDefine AI/LLM security guardrails, including prompt-injection defenses, model/data access controls, and safe-use patterns for engineering teams\nLead chaos engineering exercises to validate security controls and resilience under failure and attack scenarios\nDefine risk-based security gates in Azure DevOps and partner with engineering on pragmatic exception handling\nConvert third-party pen test and internal findings into durable engineering fixes and regression checks\nMentor engineers and junior security staff through design pairing, code review, and incident retrospectives\nPresent architecture decisions, risks, and remediation progress to technical and executive stakeholders\nFirst 90 Days (Concrete Deliverables)\nPublish a target-state application security architecture with prioritized implementation roadmap\nDeliver two reference implementations (one API service, one data-access service) showing secure patterns end-to-end\nStand up baseline threat-model workflow for all tier-1 services with tracked remediation outcomes\nDefine and launch security scorecard metrics (coverage, MTTR, policy exceptions, high-risk exposure trends)\nComplete toolchain fit assessment with keep/replace recommendations and rollout plan\nQualifications\nRequired\n7+ years in application security, security engineering, or software engineering with significant security architecture ownership\nProven delivery in cloud-native Azure environments (AKS, App Services, Entra ID, Managed Identities)\nDeep experience with microservice/API security, authentication/authorization, secrets management, and data protection\nStrong practical threat modeling and secure design review experience tied to shipped outcomes\nHands-on experience integrating security controls into CI/CD workflows (Azure DevOps preferred)\nAbility to code and review implementation quality in at least one major backend stack (.NET or Python preferred)\nDemonstrated ability to drive cross-team adoption, resolve trade-offs, and deliver under business constraints\nPreferred\nFinancial services or similarly regulated environment experience\nKubernetes network policy and runtime hardening depth\nExperience building security metrics programs and engineering SLAs\nBackground partnering with offensive security and incident response teams","description_format":"text","description_chars":5430,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Financial Services","Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-10-28T18:19:51Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 24 · green card filings: 8","filings_12m":24,"filings_prev_12m":15,"green_card_filings_12m":8,"median_offered_wage_usd":129375,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":3,"expected_fill_days":15,"reasons":["conf:1","urgency","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/servicelink-application-security-architect-information-technology","json_url":"https://alion.io/job/servicelink-application-security-architect-information-technology.json","meta":{"generated_at":"2026-11-01T12:34:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19353,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2938110},"rest":"https://alion.io/mcp/rest/get_company?id=2938110"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fservicelink-application-security-architect-information-technology"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fservicelink-application-security-architect-information-technology"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fservicelink-application-security-architect-information-technology"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/servicelink-application-security-architect-information-technology\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fservicelink-application-security-architect-information-technology"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3412301}},{"tool":"search_jobs","arguments":{"company":"servicelink.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3412301},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}