Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward. JLL es una empresa comprometida con la igualdad de oportunidades entre hombres y mujeres / JLL as a company is committed to equal opportunities for men and women.Senior Application Security Architect Overview At JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced.

The Application Security

Architect is a senior individual contributor responsible for bridging application security engineering and enterprise security architecture at JLL. This role designs and owns security architectures for application ecosystems, integrates security into the software development lifecycle (SDLC), and serves as a technical authority on secure design patterns, threat modeling, and DevSecOps practices. Operating at the Senior level, this position independently leads application security initiatives, mentors junior engineers and developers, and partners across engineering, architecture, and business teams to reduce risk and enable secure digital transformation.

Security

Architecture & Design Design and maintain security architecture standards, policies, and patterns for enterprise applications, platforms, and cloud-native environments, ensuring alignment with JLL's technology strategy and risk posture. Develop and enforce secure design patterns, reference architectures, and architecture decision records (ADRs) for application security across development teams.



Integrate zero-trust principles and defense-in-depth strategies into application architecture to reduce attack surface and support enterprise risk management goals.

DevSecOps & Secure Development Lifecycle Define and maintain a standardized set of enterprise application security requirements and produce metrics to report performance against those requirements. Champion secure coding standards and developer security enablement programs in collaboration with platform and application engineering teams. Mentorship & Team Leadership Provide technical guidance and mentoring to junior security engineers, developers, and architects on application security principles, secure coding practices, and architectural standards.

Support secure development training and awareness programs to build security competency across engineering organizations. Demonstrated experience designing security architectures for cloud-native environments (AWS, Azure, GCP), microservices, APIs, and containerized workloads. SAST, DAST, SCA, container image scanning, secrets management, and CI/CD security integration.

Working knowledge of identity and access management (IAM), OAuth 2.0/OIDC, and application-layer authentication and authorization controls. Understanding of cryptography, data protection, encryption, and Public Key Infrastructure Familiarity with threat modeling methodologies (STRIDE, PASTA, or equivalent)



and their application to complex distributed application architectures. Proven capability to mentor and guide junior security professionals and developers on secure design practices and security engineering standards.

Ability to balance security rigor with development velocity, enabling secure delivery of digital applications and services.

Education & Experience Bachelor's degree in Computer Science, Information Security, Software Engineering, or a related field; 7+ years of experience in information security with a focus on application security engineering, secure software development, or security architecture. CSSLP, CISSP, AWS/Azure Security Specialty, OSCP, or equivalent application security or architecture credentials.

Location: Remote -Barcelona, ESPIf this resonates with you, we encourage you to apply even if you don’t meet all of the requirements. JLL Privacy NoticeJones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading general provider of real estate and investment management services. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons.

We will then delete it safely and securely.For more information about how JLL processes your personal data, please view our Candidate Privacy Statement.If you need a reasonable accommodation because of a disability for any part of the employment process - including the online application and/or overall selection process - you may email us at [email protected]. Please direct any other general recruiting inquiries to our Contact Us page > I want to work for JLL.Full time

📌 Lead Application Security Architect (Barcelona)
🏢 Jones Lang Lasalle
📍 Barcelona