{"id":959130,"url":"https://alion.io/job/stifel-ai-application-security-architect","title":"AI-Application Security Architect","company":{"id":692655,"name":"Stifel","domain":"stifel.com","url":"https://alion.io/company/stifel","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":13,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint Louis, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":158000,"max_usd":315000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"Java","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-16T08:14:08Z","employer_posted_date":"2026-09-19","last_verified_at":"2026-11-07T22:26:17Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"Why Stifel\nStifel strives for a culture that puts its clients and associates first: a culture where everyone belongs, everyone is welcome, and everyone contributes to the success of our clients, their careers, and the firm as a whole.\nLet’s talk about how you can find your place here at Stifel, where success meets success.\nWhat You'll Be Doing\nThe AI-Application Security Architect is responsible for defining, governing, and advancing the enterprise AI / application security architecture across the organization. This role provides strategic and technical leadership to ensure applications are designed and built securely at scale, aligned with business objectives, regulatory requirements, and evolving threat landscapes. Acting as a trusted advisor to engineering leadership, this role balances risk reduction with development velocity and innovation.\nWhat We're Looking For\nDesign and lead the implementation of enterprise-wide AI / application security strategies, policies, standards, and reference architectures aligned with business objectives, regulatory requirements, and industry best practices. \nPartner closely with software engineering, platform, and DevOps teams to embed security throughout the SDLC, promoting a secure-by-design culture and enabling scalable, automated security controls.\nLead and oversee AI / application architecture reviews, threat modeling exercises, and design risk assessments to proactively identify and mitigate security risks.\nDefine, validate, and prototype security architecture patterns through hands-on evaluations, proof-of-concepts (POCs), and technical deep dives, ensuring proposed controls are practical and effective.\nEstablish and maintain secure design patterns and reference architectures for modern application stacks, including AI, cloud-native, microservices, APIs, and event-driven systems.\nDefine and govern the integration application security tooling (SAST, DAST, SCA, secrets scanning, CI/CD controls) to improve coverage, consistency, and developer adoption.\nDevelop and maintain AI / application security metrics and KPIs to measure program maturity, communicate risk posture to leadership, and drive continuous improvement.\nServe as a subject matter expert (SME) and escalation point for complex AI / application security design decisions, risk exceptions, and non-standard architectures.\nEstablish and enforce AI / application security architecture governance, including design review checkpoints, standards enforcement, and defined escalation paths for non-compliant designs.\nCollaborate with enterprise architecture, cloud security, infrastructure, and GRC teams to ensure application security controls are aligned across platforms and technologies.\nResearch and evaluate emerging threats, security technologies, frameworks, and industry trends, recommending strategic improvements to the enterprise application security architecture enterprise application security architecture.\nMentor and provide technical guidance to AI / application security engineers and development teams, raising overall security maturity and architectural consistency.\nLead AI-specific application threat modeling, addressing risks such as prompt injection, model inversion, data poisoning, unauthorized model access, and misuse of generative outputs.\nDefine and govern secure architecture patterns for AI-enabled applications, including controls for data protection, identity, authorization, logging, and monitoring.\nEstablish security and governance standards for the adoption of third-party AI platforms and APIs, ensuring alignment with enterprise security, privacy, and risk management frameworks.\nPartner with legal, compliance, and risk teams to ensure responsible and compliant use of AI capabilities, consistent with enterprise risk tolerance and regulatory expectations.\nWhat You'll Bring\nDeep understanding of security principles, methods and technologies related to application development, deployment, and maintenance.\nExperience with industry standard security frameworks, such as OWASP, SANS, or NIST.\nKnowledge of various programming languages, such as Java, .NET, and Python.\nExperience with security testing tools, such as Nessus, Metasploit, and Burp Suite.\nStrong analytical and problem-solving skills, with the ability to identify and mitigate security risks.\nStrong understanding of cloud computing and associated security risks.\nExcellent communication skills, with the ability to effectively communicate complex security issues to technical and non-technical audiences.\nEducation & Experience\nMinimum Required: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience. \nPreferred: Master's degree in Computer Science, Information Security, or a related field.\nMinimum Required: 7+ years of experience in application security architecture, design, and development.\nLicenses & Credentials\nPreferred: Professional security certifications, such as CISSP, CISM, or SANS GIAC.\nSystems & Technology\nExpertise in code analysis and testing tools. \nExpertise in web application firewalls.\nAbility to understand and support multiple programming languages and frameworks.\nUnderstanding of encryption and key management solutions.\nExperience with working with multiple authentication methods and protocols.\nExperience with office productivity, reporting, and technical documentation software.\nAbout Stifel\nStifel is more than 130 years old and still thinking like a start-up. We are a global wealth management and investment banking firm serious about innovation and fresh ideas. Built on a simple premise of safeguarding our clients’ money as if it were our own, coined by our namesake, Herman Stifel, our success is intimately tied to our commitment to helping families, companies, and municipalities find their own success.\nWhile our headquarters is in St. Louis, we have offices in New York, San Francisco, Baltimore, London, Frankfurt, Toronto, and more than 400 other locations. Stifel is home to approximately 9,000 individuals who are currently building their careers as financial advisors, research analysts, project managers, marketing specialists, developers, bankers, operations associates, among hundreds more. Let’s talk about how you can find your place here at Stifel, where success meets success.\nAt Stifel we offer an entrepreneurial environment, comprehensive benefits package to include health, dental and vision care, 401k, wellness initiatives, life insurance, and paid time off.\nStifel is an Equal Opportunity Employer.","description_format":"text","description_chars":6551,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Wealth Management & Financial Advisors","Investment Banking & M&A Advisory","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-09-16T08:14:08Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 12 · green card filings: 1","filings_12m":12,"filings_prev_12m":12,"green_card_filings_12m":1,"median_offered_wage_usd":113269,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.495,"p_room":0.35,"age_days":51,"expected_fill_days":13,"reasons":["conf:4","velocity","win:tail"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/stifel-ai-application-security-architect","json_url":"https://alion.io/job/stifel-ai-application-security-architect.json","meta":{"generated_at":"2026-11-08T01:43:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3747,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":692655},"rest":"https://alion.io/mcp/rest/get_company?id=692655"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstifel-ai-application-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstifel-ai-application-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstifel-ai-application-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stifel-ai-application-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstifel-ai-application-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":959130}},{"tool":"search_jobs","arguments":{"company":"stifel.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":959130},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}