Job Search

We are seeking an experienced Application Security Architect to define and advance secure software development practices across a diverse technology environment. In this role, you will shape application security strategy, establish architectural principles, and work closely with engineering, infrastructure, product, and risk teams to ensure security is embedded throughout the software development lifecycle. You will assess existing applications and platforms, identify areas of risk, and recommend practical improvements that support both business objectives and regulatory expectations.

Your responsibilities will include designing secure application and API architectures, reviewing solution designs, and providing security guidance for cloud-native, web, mobile, and distributed systems. You will develop and maintain security standards, patterns, threat models, and reference architectures, while advising teams on identity and access management, data protection, encryption, secrets management, secure integrations, and resilience. You will also support vulnerability management by interpreting findings, prioritising remediation, and helping development teams resolve complex security issues. The role will involve contributing to security tooling and automation, including software composition analysis, static and dynamic testing, infrastructure-as-code scanning, and security controls integrated into CI/CD pipelines.

The successful candidate will have significant experience in application security, software engineering, security architecture, or a closely related discipline, with a strong understanding of secure coding principles, common attack techniques, and frameworks such as OWASP. Experience with public cloud platforms, APIs, microservices, containers, DevSecOps practices, and modern authentication protocols is highly desirable. Relevant professional qualifications or certifications are advantageous. You should be able to communicate complex technical risks clearly to both technical and non-technical audiences, influence decisions without direct authority, and build trusted relationships across teams. A pragmatic, collaborative approach and a commitment to continuous improvement are essential.