Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology to our clients. Whether you've got deep experience in commercial real estate, skilled trades, and technology, or you're looking to apply your relevant experience to a new industry, we empower you to shape a brighter way forward so you can thrive professionally and personally.

Senior Application Security

ArchitectOverviewAt JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced.

The Application Security

Architect is a senior individual contributor responsible for bridging application security engineering and enterprise security architecture at JLL.This role designs and owns security architectures for application ecosystems, integrates security into the software development lifecycle (SDLC), and serves as a technical authority on secure design patterns, threat modeling, and DevSecOps practices. Operating at the Senior level, this position independently leads application security initiatives, mentors junior engineers and developers, and partners across engineering, architecture, and business teams to reduce risk and enable secure digital transformation.

Security

Architecture & DesignDesign and maintain security architecture standards, policies, and patterns for enterprise applications, platforms, and cloud-native environments, ensuring alignment with JLL's technology strategy and risk posture. Develop and enforce secure design patterns, reference architectures, and architecture decision records (ADRs) for application security across development teams. Integrate zero-trust principles and defense-in-depth strategies into application architecture to reduce attack surface and support enterprise risk management goals.

DevSecOps & Secure Development LifecycleDefine and maintain a standardized set of enterprise application security requirements and produce metrics to report performance against those requirements.



Champion secure coding standards and developer security enablement programs in collaboration with platform and application engineering teams. Mentorship & Team LeadershipProvide technical guidance and mentoring to junior security engineers, developers, and architects on application security principles, secure coding practices, and architectural standards.

Support secure development training and awareness programs to build security competency across engineering organizations. Demonstrated experience designing security architectures for cloud-native environments (AWS, Azure, GCP), microservices, APIs, and containerized workloads. SAST, DAST, SCA, container image scanning, secrets management, and CI/CD security integration.

Working knowledge of identity and access management (IAM), OAuth 2.0/OIDC, and application-layer authentication and authorization controls. Understanding of cryptography, data protection, encryption, and Public Key InfrastructureFamiliarity with threat modeling methodologies (STRIDE, PASTA, or equivalent) and their application to complex distributed application architectures. Proven capability to mentor and guide junior security professionals and developers on secure design practices and security engineering standards.

Ability to balance security rigor with development velocity, enabling secure delivery of digital applications and services.

Education & ExperienceBachelor's degree in Computer Science, Information Security, Software Engineering, or a related field; 7+ years of experience in information security with a focus on application security engineering, secure software development, or security architecture. CSSLP, CISSP, AWS/Azure Security Specialty, OSCP, or equivalent application security or architecture credentials. About JLL –We're JLL—a leading professional services and investment management firm specializing in real estate.

As a integral Fortune 500 company, we also have an inherent responsibility to drive sustainability and corporate social responsibility. And we know that unique backgrounds, experiences and perspectives help us think bigger, spark innovation and succeed together.

📌 Lead Application Security Architect (Barcelona)
🏢 Jones Lang Lasalle
📍 Barcelona