Application Security Architect – AI Harness
So many opportunities to make a difference. And advance your career.
You’ve embraced our purpose of making a meaningful difference in the lives of our clients, our colleagues and our communities. You’ve experienced the collaboration borne of a firm where everyone is aligned toward a singular focus: serving the client. You belong at Edward Jones, but you’re ready to stretch your skills and advance your career.
Job Overview
Position Schedule: Full-Time
Hiring Leader: Ivan De Los Santos
Recruiter: Anne Schwabe
HQ Grade: 12
Hiring Minimum: $120000
Hiring Maximum: $204300
The Application Security Architect, Agentic Secure Code Architect is a hands-on architecture-focused IC responsible for designing, integrating, maintaining, and improving a CI/CD-integrated AI evaluation harness used to assess application and infrastructure source code for security vulnerabilities and insecure-design practices. This role combines AppSec, DevSecOps, AI engineering, secure SDLC governance, and financial-services compliance, with strong emphasis on source-code protection, enterprise controls governance, repeatability, auditability, measurable risk reduction, and developer trust.
What You’ll Do:
- Architect the CI/CD-integrated AI secure-code evaluation harness as a hands-on IC for source code repositories and Secure SDLC lifecycles.
- Integrate evaluation workflows with pipeline tooling and AppSec reporting platforms.
- Design AI-assisted secure code review methods that complement SAST, SCA, DAST, secrets scanning, IaC scanning, threat modeling, security testing, and manual assessments.
- Maintain benchmarks, golden test cases, prompt/model versions, retrieval configurations, scoring criteria, and regression tests for AI-generated findings.
- Govern approved vendor and frontier AI models, including selection, routing, fallback patterns, accuracy, explainability, cost, and data-protection trade-offs.
- Define safeguards for proprietary production code, including access controls, approved model endpoints, minimization, retention limits, secure logging, and evidence handling.
- Route validated findings into developer workflows with actionable remediation guidance and feedback loops to reduce false positives and improve adoption.
- Define metrics and control evidence aligned to internal governance processes, financial services industries authorities, and cyber security frameworks (NIST SSDF, NIST CSF 2.0, NYDFS, FINRA, SOX ITGC, FFIEC, GLBA).
Skills/Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, Information Technology, Engineering, or related field.
- 10+ years of experience in application security, secure software engineering, DevSecOps, security architecture, or related cybersecurity roles.
- Deep expertise in secure code review, vulnerability detection, threat modeling, exploitability analysis, and secure SDLC practices.
- Experience with performing vulnerability and penetration test readouts/walkthroughs with stakeholders.
- Hands-on experience with SAST, SCA, DAST, secrets scanning, API security testing, container security, infrastructure-as-code scanning, and developer workflow integrations.
- Experience integrating security capabilities into SDLC pipeline tooling: Jenkins, GitHub Actions, GitHub Enterprise, Atlassian, developer portals, source-control workflows, and DevSecOps toolchains.
- Practical experience using LLMs or AI models for code review, software engineering, vulnerability research, security analysis, or developer productivity use cases.
- Understanding of prompt engineering and optimization, RAG, model evaluation, AI guardrails, human-in-the-loop review, prompt/model versioning, and vendor/open-source model trade-offs.
- Experience designing or maintaining evaluation harnesses, benchmark suites, regression tests, validation pipelines, and test orchestration workflows.
- Strong understanding of concepts: OWASP, CWE, CVSS, NIST SSDF, AI security risks, regulated source-code handling, auditability, and vendor/model governance.
What Could Set You Apart:
- Master’s degree or relevant certifications such as CISSP, CSSLP, OSWE, GWAPT, CCSP, cloud security, Kubernetes security, or AI governance certifications.
- Experience delivering AI-assisted AppSec capabilities in a Fortune 500 or highly regulated financial services environment.
- Hands-on experience with enterprise AI platforms, approved vendor models, open-source models, secure hosting, RAG, and AI governance controls.
- Experience building secure code review automation, custom static analysis rules, vulnerability detection pipelines, benchmark datasets, or AI-based developer tooling.
- Demonstrated success reducing AppSec risk through improved detection accuracy, lower false positives, faster remediation, and stronger developer enablement.
**Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.**
Career Progression
Career Progression

The skills you’re gaining in your current role can help you succeed in your next.
Tech? HR? Marketing? Operations? One of the benefits of working at a large firm with many areas of expertise is that you can test the waters in other areas. Bring your transferable skills to a new role or division. Use your experience as a springboard to leadership. We encourage you to advance your career in this way — and will support you along the way.

Extra compensation when you need it most – with no ceiling on how much you can earn.
And we really mean it. There is no ceiling on how much you can earn as we have a work hard and be rewarded philosophy. We also understand that new financial advisors might be more worried about the floor. So we provide a guaranteed salary for your first four years. Did we mention bonuses, commissions, profit sharing and travel awards?
“As hard as I want to work determines how successful my business can be.”
– Mark Audet, CFP Financial Advisor
Associate Testimonial
Associate Testimonial
It’s like professional development in the world’s largest sandbox.
Training, continuing education and mentoring – that’s only the beginning. Our headquarter campuses offer thousands of roles – and as many opportunities – for you to try new skills, get involved on different projects and step up as a leader. You’re in charge of your professional development. We just provide the opportunities.


Learn more at a virtual or in-person event
Learn how Edward Jones is built differently – and how our unique business model puts you in charge of unleashing your potential. Virtually or in-person, we’ve created several opportunities for you to network and learn more from current Edward Jones financial advisors.

Webinars
Register for our “Investing In You: The Edward Jones Financial Advisor Opportunity” webinar. This confidential, 30-minute program provide insight into what financial advisors do, valuable transferable skills and the ongoing support you’ll be provided throughout your career. Ask questions and get answers from Edward Jones financial advisors working in the field today.
Edward Jones Managing Partner
Career Progression

Come as you are. We will teach you everything you need to know.
Our Branch Office Administrators come from many different career backgrounds. Sales. Marketing. Customer service. Even finance. But they have one thing in common: a desire for a rewarding career that empowers them to make a difference in people’s lives. Your training begins with six months of dedicated onboarding – and is built out with mentoring, learning plans tailored to your needs, and 6,000-plus at the Headquarters making sure you have everything you need to succeed.
























