Security Architect

Pepperstone; City of Melbourne; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible work arrangements

Remote work option

Parental leave

Job summary

Pepperstone is a rapidly growing fintech with a global footprint and Melbourne roots. We are seeking a Security Architect to shape our security design for applications, APIs and supporting platforms.

You will translate risk appetite into actionable architectural patterns for engineering teams. As part of the Security team, you will drive secure-by-design principles, collaborate with product managers and engineers, and influence security practices across Pepperstone Crypto and other platforms.

Qualifications

• Experience designing secure, scalable solutions across complex environments.
• Strong application security expertise across web, mobile, APIs and cloud-native architectures.
• Experience with cryptocurrency, blockchain or digital asset platforms is highly regarded.

Responsibilities

• Lead the vision and strategy for application security architecture across web, mobile, API and cloud-hosted platforms.
• Embed secure-by-design principles into products, features and technology initiatives.
• Drive security architecture reviews and threat modelling to identify risks early.
• Develop security patterns and guardrails to enable secure delivery at scale.
• Provide guidance on security within the Crypto ecosystem (wallet security, custody, exchange connectivity).
• Collaborate with Security, Cloud, Risk and Compliance teams to meet regulatory expectations.

Skills

Security architecture

Threat modelling

Communication

Stakeholder management

Cloud-native architectures

Education

CISSP

CSSLP

OSCP

CCSP

AWS Security

Azure Security

Tools

AWS

Azure

Job description

The Pepperstone story started in 2010. We know what it’s like to trade the world’s markets. Our team describes us as a place for the curious and the driven, and we like to do things a little differently; as a transformative global fintech we’re digital, nimble, connected and united in our vision to create a better way to trade.

We thrive on progress – for our clients and for ourselves. Our organisational culture is ever-evolving, vibrant, diverse, global and results focused.

You’ll find our 700+ team currently across 12 locations and 9 time zones.

Our technology team thrives on inclusivity and collaboration, believing that diverse perspectives lead to great solutions. We foster a culture that champions individual growth, professional development, and work-life harmony. We\'re invested in your success and dedicated to supporting you every step of the way. We encourage our team to bring challenge thinking and fresh ideas to the table and our Agile approach empowers us to focus on outcomes. When we hire someone it\'s because they bring the skills, attitude and experience we\'re looking for....so we let you do what you\'re best at! Join us and be part of a community that\'s passionate about harnessing technology\'s potential to drive market leading solutions for our clients. Elevate your career in an environment where your ideas matter, your growth is nurtured, and your potential is limitless.

The Role

Come join Pepperstone as a Security Architect and play a key role in shaping our growing security capability. You\'ll turn complex business challenges into pragmatic, value-driven solutions while influencing the technical direction of our platforms.

As part of the Security team, you will help define and own the security design of Pepperstone\'s applications, APIs, and supporting platforms. Sitting within the Application Security team, you\'ll translate our organisational risk appetite into clear, actionable architectural patterns that engineering teams can build to, ensuring security is a foundational consideration rather than an afterthought. You\'ll also bring a dedicated security architecture focus to Pepperstone Crypto, helping shape secure design patterns for digital asset products in a fast-evolving regulatory landscape. As the senior technical authority on application security architecture, you\'ll work closely with engineers, product managers, and senior stakeholders to drive secure-by-design principles across our product portfolio.

As our Security Architect, your key responsibilities include, but may not be limited to:

• Lead the vision and strategy for application security architecture across web, mobile, API and cloud-hosted platforms.
• Partner with engineering and product teams to embed secure-by-design principles into new products, features and technology initiatives.
• Drive security architecture reviews and threat modelling activities, helping teams identify risks early and implement practical solutions.
• Develop security patterns, frameworks and architectural guardrails that enable teams to build securely at scale.
• Provide expert guidance on security considerations within our Crypto ecosystem, including wallet security, custody platforms, exchange connectivity and blockchain integrations.
• Evaluate emerging security technologies and tooling to continually strengthen our application security capability.
• Collaborate with Cloud, Infrastructure, Risk and Compliance teams to ensure our solutions meet both security requirements and regulatory expectations.
• Influence technical decision-making and represent security architecture within technology strategy and governance forums

About you

• You're an experienced Security Architect or senior security professional with a track record of designing secure, scalable solutions across complex technology environments.
• You bring strong application security expertise across web, mobile, APIs and cloud-native architectures, with experience securing cryptocurrency, blockchain or digital asset platforms highly regarded.
• You have a deep understanding of modern security threats, secure development practices and threat modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK.
• You're comfortable working across AWS, Azure or hybrid cloud environments, helping teams embed security into their products from the ground up.
• You enjoy partnering with engineers, product teams and business stakeholders to deliver pragmatic security outcomes that balance risk, innovation and customer experience.
• You have experience working within regulated environments and are familiar with frameworks such as DORA, PCI-DSS, ISO and SOC.
• You're an excellent communicator who can translate complex technical concepts into clear guidance and influence decision-making at all levels.
• A background in software engineering or application development, along with certifications such as CISSP, CSSLP, OSCP, CCSP or AWS/Azure Security, will be highly regarded.
• You're passionate about continuous learning, staying ahead of emerging threats and contributing to a collaborative, high-performing team.

Why you will enjoy working with us

• Competitive salary structure including company bonus scheme
• Genuinely collaborative and friendly culture
• Flexible and hybrid working
• Remote working option - work from anywhere for up to 4 weeks per year, in addition to hybrid working as standard
• Ongoing personal development & learning opportunities
• 15 weeks paid primary carers parental leave & 4 weeks paid secondary carers leave
• 3 paid volunteering days per year & Workplace Giving Program
• Frequent events and celebrations including a standard weekly social
• Beautifully renovated large office at Collins Square - 727 Collins Street, Melbourne
• Best in class end of trip facilities including bicycle parking, change rooms & showers
• A full stocked kitchen, onsite coffee machines with locally sourced coffee beans (this is Melbourne after all) and curated specialty teas

More About Pepperstone

We’re a regulated online Forex and CFD trading platform. With the scale of a global fintech and the agility of a start-up, we arm our clients with everything they need to take on the global markets with confidence. You will be part of a wider passionate and friendly team, and whilst things may not always go to plan, we learn quickly and move forward with impact. To learn even more visit Pepperstonecareers and www.linkedin.com/company/pepperstone/

We understand it’s important to do due diligence on a prospective employer, see what our team are saying on Glassdoor. We respect our team members’ experiences and will never pay to remove a negative review.

Pepperstone is an equal opportunity employer. We are passionate about building a diverse workplace and strongly encourage applications from any background.

We are a 2025 Circle Back Initiative Employer – we respond to every applicant

We will be reviewing applications as they come through, so if this is an opportunity that excites you, don\'t wait. Express your interest by clicking the apply button below as soon as possible.

Note to external agencies: While we appreciate the efforts of external recruitment agencies, we prefer to engage directly with applicants for this opportunity.

#Li-Hybrid