Application Security Architect

TN United Kingdom; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

Join a forward-thinking company as an Application Security Architect, where your expertise in security best practices and threat modeling will be crucial. You'll work independently with developers to ensure secure designs and implementations, while also training teams and developing automation tools. This role offers a unique opportunity to contribute to innovative software solutions that advance infrastructure globally. With a supportive and collaborative environment, you will thrive within a diverse team, driving impactful decisions and shaping the future of secure software development.

Benefits

Competitive salary and benefits

Great team and culture

Opportunity for career growth

Supportive and collaborative environment

Qualifications

• 4+ years in application security architecture with a software development background.
• Strong skills in threat modeling and code auditing.
• Excellent communication to convey technical issues.

Responsibilities

• Define security best practices and perform architecture reviews.
• Provide remediation guidance to developers.
• Lead Secure Software Development Lifecycle practices.

Skills

Application Security Architecture

Software Development

Threat Modeling

Code Auditing

Cloud Technologies

Problem Solving

Communication Skills

Education

CISSP Certification

CCSP Certification

Tools

Kubernetes

Docker

Istio

Job description

Social network you want to login/join with:

We will rely on you for the following:

1. Define security best practices and standards.
2. Perform security architecture and design reviews of applications.
3. Work independently with developers to ensure secure design, development, implementation, and verification of applications.
4. Provide remediation guidance and recommendations to developers and administrators.
5. Lead Secure Software Development Lifecycle best practices and standards.
6. Participate in and advance threat modeling practices.
7. Help stakeholders make risk-based decisions.
8. Train developers and create educational presentations.
9. Develop tools and automation supporting responsibilities.

What You Bring to The Team :

1. More than 4 years of application Security Architecture experience.
2. Background experience in software development.
3. Strong experience in threat modeling software systems.
4. Proficiency in reading, writing, and auditing code and the ability to learn new languages/technologies.
5. Proficiency in cloud technologies.
6. Experience with OWASP Top10 or SANS Top 25.
7. Experience breaking down complex systems and applications to identify threats.
8. Certification in CISSP or CCSP is a plus.
9. Strong problem-solving capabilities using various technologies.
10. Ability to research new topics and learn quickly.
11. Excellent communication skills, both verbal and written, to convey complex technical issues and risks to developers, network engineers, system administrators, and management.
12. Physical requirements include sitting or standing at will while working on a computer. The role involves communication with managers, peers, and colleagues via in-person and virtual means such as Microsoft Teams.

What would make you stand out:

1. Knowledge/Experience with containerization solutions such as Kubernetes, Docker, and Istio.
2. Knowledge of OAuth Connect.
3. Ability to make risk-based, unbiased judgments considering both technical and business impacts.

This role is subject to multiple background checks: conduct search, criminal check, global sanctions & enforcement, and global employment checks. An offer is contingent upon successful verification of these checks, performed by an external vendor, HireRight, during the written offer process.

What We Offer:

1. A great team and culture – please see our recruitment video.
2. An exciting career as part of a world-leading software company providing solutions for architecture, engineering, and construction.
3. Competitive salary and benefits.
4. The opportunity to work within a global and diverse international team.
5. A supportive and collaborative environment.

About Bentley Systems:

Bentley Systems (Nasdaq: BSY) is an infrastructure engineering software company. We provide innovative software to advance the world’s infrastructure—sustaining both the global economy and environment. Our industry-leading software solutions are used by professionals and organizations of all sizes for designing, constructing, and operating roads, bridges, rail transit, water and wastewater systems, public works, utilities, buildings, campuses, mining, and industrial facilities. Powered by the iTwin Platform for infrastructure digital twins, our offerings include MicroStation, Bentley Open applications, Seequent’s geoprofessional software, and Bentley Infrastructure Cloud solutions such as ProjectWise, SYNCHRO, and AssetWise. Bentley Systems employs over 5,200 colleagues generating more than $1 billion in revenue across 194 countries.