Define, validate, and prototype security architecture patterns through hands-on evaluations, proof-of-concepts (POCs), and technical deep dives, ensuring proposed controls are practical and effective.
Establish and maintain secure design patterns and reference architectures for modern application stacks, including AI, cloud-native, microservices, APIs, and event-driven systems.
Define and govern the integration application security tooling (SAST, DAST, SCA, secrets scanning, CI/CD controls) to improve coverage, consistency, and developer adoption.
Develop and maintain AI / application security metrics and KPIs to measure program maturity, communicate risk posture to leadership, and drive continuous improvement.
Serve as a subject matter expert (SME) and escalation point for complex AI / application security design decisions, risk exceptions, and non-standard architectures.
Establish and enforce AI / application security architecture governance, including design review checkpoints, standards enforcement, and defined escalation paths for non-compliant designs.
Collaborate with enterprise architecture, cloud security, infrastructure, and GRC teams to ensure application security controls are aligned across platforms and technologies.
Research and evaluate emerging threats, security technologies, frameworks, and industry trends, recommending strategic improvements to the enterprise application security architecture enterprise application security architecture.
Mentor and provide technical guidance to AI / application security engineers and development teams, raising overall security maturity and architectural consistency.
Lead AI-specific application threat modeling, addressing risks such as prompt injection, model inversion, data poisoning, unauthorized model access, and misuse of generative outputs.
Define and govern secure architecture patterns for AI-enabled applications, including controls for data protection, identity, authorization, logging, and monitoring.
Establish security and governance standards for the adoption of third-party AI platforms and APIs, ensuring alignment with enterprise security, privacy, and risk management frameworks.
Partner with legal, compliance, and risk teams to ensure responsible and compliant use of AI capabilities, consistent with enterprise risk tolerance and regulatory expectations.
What You'll Bring
Deep understanding of security principles, methods and technologies related to application development, deployment, and maintenance.
Experience with industry standard security frameworks, such as OWASP, SANS, or NIST.
Knowledge of various programming languages, such as Java, .NET, and Python.
Experience with security testing tools, such as Nessus, Metasploit, and Burp Suite.
Strong analytical and problem-solving skills, with the ability to identify and mitigate security risks.
Strong understanding of cloud computing and associated security risks.
Excellent communication skills, with the ability to effectively communicate complex security issues to technical and non-technical audiences.
Education & Experience
Minimum Required: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
Preferred: Master's degree in Computer Science, Information Security, or a related field.
Minimum Required: 7+ years of experience in application security architecture, design, and development.
Licenses & Credentials
Preferred: Professional security certifications, such as CISSP, CISM, or SANS GIAC.
Systems & Technology
Expertise in code analysis and testing tools.
Expertise in web application firewalls.
Ability to understand and support multiple programming languages and frameworks.
Understanding of encryption and key management solutions.
Experience with working with multiple authentication methods and protocols.
Experience with office productivity, reporting, and technical documentation software.
#LI-LL1
About Stifel
Stifel is more than 130 years old and still thinking like a start-up. We are a global wealth management and investment banking firm serious about innovation and fresh ideas. Built on a simple premise of safeguarding our clients’ money as if it were our own, coined by our namesake, Herman Stifel, our success is intimately tied to our commitment to helping families, companies, and municipalities find their own success.
While our headquarters is in St. Louis, we have offices in New York, San Francisco, Baltimore, London, Frankfurt, Toronto, and more than 400 other locations. Stifel is home to approximately 9,000 individuals who are currently building their careers as financial advisors, research analysts, project managers, marketing specialists, developers, bankers, operations associates, among hundreds more. Let’s talk about how you can find your place here at Stifel, where success meets success.
At Stifel we offer an entrepreneurial environment, comprehensive benefits package to include health, dental and vision care, 401k, wellness initiatives, life insurance, and paid time off.
Stifel is an Equal Opportunity Employer.
