# Principal Application Security Engineer/Architect

[Nextta](https://gurify.com/jobs?q=Nextta) · Tel Aviv, Israel · Posted yesterday

Principal

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://www.comeet.com/jobs/nextta/5A.006/principal-application-security-engineerarchitect/77.474)

## Job description

### Principal Application Security Engineer /architect /Team Lead

A hands-on senior expert who leads AppSec strategy, reviews designs, and ensures compliance across multiple engineering teams.

Role Summary:
The Application Security Architect is responsible for defining, implementing, and governing security standards across all applications in development. This role ensures that APIs, SDKs, integrations, and microservices adhere to secure design principles and meet regulatory and organizational security requirements.

### Key Responsibilities:

- Establish and maintain security architecture standards for application development, APIs, and SDK integrations.

- Partner with engineering teams to ensure secure-by-design principles are embedded from concept through deployment.

- Review and approve API designs, authentication flows, encryption requirements, and integration patterns.

- Lead threat modeling for new features, especially those involving external APIs or third-party SDKs.

- Oversee secure coding practices and conduct deep-dive code reviews for high-risk components.

- Define and enforce security requirements across the SDLC, including dependency management and supply-chain security.

- Collaborate with DevOps to ensure secure CI/CD pipelines, secrets management, and infrastructure alignment.

- Evaluate and approve third-party SDKs, libraries, and integrations for security posture.

- Drive remediation of vulnerabilities and ensure compliance with frameworks such as OWASP ASVS, OWASP API Security Top 10, and relevant regulatory standards.

- Mentor engineering teams and act as the senior security authority for application development.

### Qualifications:

- 8–12+ years in application security, software security, or security architecture.

- Deep expertise in API security, OAuth2, OpenID Connect, JWT, mTLS, and secure integration patterns.

- Strong understanding of cloud-native architectures (AWS/GCP/Azure), microservices, and container security.

- Experience with secure SDLC frameworks and enterprise security governance.

- Ability to influence engineering leadership and drive security strategy across teams.

A major U.S.-based communications and technology provider with over $500M in annual revenue and more than 1500 employees delivers advanced connectivity, mobility, and managed network services to federal agencies and enterprise clients. The organization operates a global private network spanning North America, Europe, Asia‑Pacific, and Latin America, supports large‑scale digital transformation initiatives, and maintains a strong online presence through its platform It also runs a dedicated development center in Israel, contributing to innovation in SD‑WAN, SASE, IoT, and enterprise mobility solutions including Biling.

**Live in Nextta’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- VI [Senior Application Security Engineer](https://gurify.com/job/senior-application-security-engineer-at-via-29d6a84848f6) Via · Tel Aviv · 3 weeks ago
- TE [Charm Security- Senior Backend Engineer – Platform](https://gurify.com/job/charm-security-senior-backend-engineer-platform-at-team8-02db73e71c38) Team8 · Tel Aviv-Yafo, Israel · last week
- ZE [AI Agent Security | Director of Platform Engineering](https://gurify.com/job/ai-agent-security-director-of-platform-engineering-at-zenity-e98cbd4b8c4f) Zenity · Tel Aviv-Jaffa, Israel · last week
- VA [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-vastdata-514171dde2fc) Vastdata · Tel Aviv-Yafo, Israel · 7 weeks ago
- NO [Israel at Novee Security](https://gurify.com/job/israel-at-novee-security-at-noveesecurity-bc1ab103d07f) Noveesecurity · Tel Aviv-Yafo, Israel · 3 weeks ago
- AQ [IT Support Engineer](https://gurify.com/job/it-support-engineer-at-aquasec-ed5023243078) Aquasec · Ramat Gan, Israel · 5 days ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Principal Application Security Engineer/Architect","description":"\u003Ch3\u003EPrincipal Application Security Engineer /architect /Team Lead\u003C/h3\u003E\u003Cp\u003EA hands-on senior expert who leads AppSec strategy, reviews designs, and ensures compliance across multiple engineering teams.\u003C/p\u003E\u003Cp\u003ERole Summary:\u003Cbr /\u003EThe Application Security Architect is responsible for defining, implementing, and governing security standards across all applications in development. This role ensures that APIs, SDKs, integrations, and microservices adhere to secure design principles and meet regulatory and organizational security requirements.\u003C/p\u003E\u003Ch3\u003EKey Responsibilities:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EEstablish and maintain security architecture standards for application development, APIs, and SDK integrations.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with engineering teams to ensure secure-by-design principles are embedded from concept through deployment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EReview and approve API designs, authentication flows, encryption requirements, and integration patterns.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELead threat modeling for new features, especially those involving external APIs or third-party SDKs.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOversee secure coding practices and conduct deep-dive code reviews for high-risk components.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDefine and enforce security requirements across the SDLC, including dependency management and supply-chain security.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECollaborate with DevOps to ensure secure CI/CD pipelines, secrets management, and infrastructure alignment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEvaluate and approve third-party SDKs, libraries, and integrations for security posture.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDrive remediation of vulnerabilities and ensure compliance with frameworks such as OWASP ASVS, OWASP API Security Top 10, and relevant regulatory standards.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMentor engineering teams and act as the senior security authority for application development.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EQualifications:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E8\u201312\u002B years in application security, software security, or security architecture.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDeep expertise in API security, OAuth2, OpenID Connect, JWT, mTLS, and secure integration patterns.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong understanding of cloud-native architectures (AWS/GCP/Azure), microservices, and container security.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with secure SDLC frameworks and enterprise security governance.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAbility to influence engineering leadership and drive security strategy across teams.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003EA major U.S.-based communications and technology provider with over $500M in annual revenue and more than 1500 employees delivers advanced connectivity, mobility, and managed network services to federal agencies and enterprise clients. The organization operates a global private network spanning North America, Europe, Asia\u2011Pacific, and Latin America, supports large\u2011scale digital transformation initiatives, and maintains a strong online presence through its platform It also runs a dedicated development center in Israel, contributing to innovation in SD\u2011WAN, SASE, IoT, and enterprise mobility solutions including Biling.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"principal-application-security-engineer-architect-at-nextta-73633c565345"},"url":"https://gurify.com/job/principal-application-security-engineer-architect-at-nextta-73633c565345","datePosted":"2026-10-27","validThrough":"2026-12-12T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Nextta","sameAs":"https://www.comeet.com/jobs/nextta"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"IL","addressLocality":"Tel Aviv"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Israel","item":"https://gurify.com/jobs/israel"},{"@type":"ListItem","position":3,"name":"Principal Application Security Engineer/Architect","item":"https://gurify.com/job/principal-application-security-engineer-architect-at-nextta-73633c565345"}]}
```