Application Security Architect

JR United Kingdom; Plymouth; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading company is seeking multiple experienced Application Security Architects to enhance their cyber team. The role involves shaping the application security posture through collaboration with development and security teams, ensuring security best practices are integrated across various platforms and applications.

Qualifications

• Proven experience in application security architecture.
• Deep knowledge of OWASP Top 10 and secure coding best practices.
• Hands-on experience with SAST/DAST/IAST tools.

Responsibilities

• Define and enforce secure architecture standards across applications.
• Lead implementation of DevSecOps practices in CI/CD pipelines.
• Identify and remediate application-level vulnerabilities.

Skills

Application Security Architecture

Secure Coding Best Practices

Threat Modelling

DevSecOps

Vulnerability Assessment

Education

CSSLP

OSWE

GWAPT

CISSP

Tools

SAST

DAST

IAST

Snyk

SonarQube

Burp Suite

Veracode

Job description

Social network you want to login/join with:

Application Security Architect, plymouth

col-narrow-left

Client:

Opus Recruitment Solutions

Location:

plymouth, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

6

Posted:

28.06.2025

Expiry Date:

12.08.2025

col-wide

Job Description:

Opus are looking for multiple experienced Application Security Architects to join our clients growing AppSec team. As our client continues the development and improvement of their overall cyber team, they’re looking for AppSec specialists to shape the strategic direction of our clients application security posture, collaborating with developers, product managers, and security stakeholders to ensure that security is embedded throughout the SDLC.

Main Responsibilities:

• Define and enforce secure architecture standards and frameworks across web, mobile, and cloud-native applications.
• Provide security guidance throughout product development, including threat modeling, secure coding, design reviews, and architecture assessments.
• Lead the implementation of DevSecOps practices, integrating security into CI/CD pipelines.
• Identify and remediate application-level vulnerabilities through static/dynamic analysis, manual code review, and security testing.
• Collaborate with engineering and platform teams to secure APIs, microservices, and containerized workloads.
• Evaluate and implement security tools for secure code analysis and runtime protection.

To be considered for this role, you should have:

• Proven experience in application security architecture.
• Deep knowledge of OWASP Top 10, SANS CWE Top 25, and secure coding best practices.
• Familiarity with threat modelling methodologies such as STRIDE and architectural risk analysis.
• Hands-on experience with tools such as SAST/DAST/IAST, Snyk, SonarQube, Burp Suite, Veracode, or similar.
• Strong understanding of cloud platforms) and modern development architectures
• Relevant certifications such as CSSLP, OSWE, GWAPT, CISSP, or equivalent are advantageous.