Lead Software Security Architect

Sepura; Cambridge; On-site; GBP 90,000 - 120,000; Full time

Job summary

Sepura in Waterbeach, Cambridge, seeks a Security Architect to lead software security across the full product line. You will own the security strategy, set architecture decisions, and drive secure design, testing and compliance throughout development, verification, release and maintenance.

You will embed threat modelling, risk assessment and evidence into CI/CD workflows, coaching teams and ensuring security is integral, not separate, to delivery.

Qualifications

• Demonstrable experience owning software or product security across multiple teams, products or platforms.
• Strong software architecture and engineering background with practical security controls.
• Deep understanding of secure development lifecycle practices, threat modelling, vulnerability management and security testing.
• Experience embedding automated security controls into build, test and CI/CD workflows.
• Ability to assess technical risk and communicate trade-offs to engineering and business stakeholders.
• Credibility to influence senior technical leaders while guiding teams through difficult design and delivery decisions.
• Clear written and verbal communication with a pragmatic approach to delivery.

Responsibilities

• Own product-line software security strategy, target state and roadmap.
• Define security architecture decisions and apply requirements across products and shared components.
• Maintain a product-wide view of security risk, dependencies and remediation commitments.
• Define measurable controls, assurance evidence and acceptance criteria.
• Integrate security requirements and threat modelling into planning and backlog refinement.
• Establish security gates across implementation, code review, build, test, release and maintenance.
• Partner with engineering teams to triage vulnerabilities and document exceptions.
• Ensure security is part of normal product development and lifecycle processes.
• Guide the use of security tooling within development and CI/CD workflows.
• Coordinate security testing, vulnerability assessment and remediation across releases.
• Provide security leadership and coaching to engineers and act as the security authority.

Skills

Software security ownership

Software architecture

Secure SDLC

Threat modelling

CI/CD security

Risk assessment

Stakeholder influence

Communication

Education

Technical degree

Job description

Sepura in Waterbeach, Cambridge, seeks a Security Architect to lead software security across the full product line. You will own the security strategy, set architecture decisions, and drive secure design, testing and compliance throughout development, verification, release and maintenance.

You will embed threat modelling, risk assessment and evidence into CI/CD workflows, coaching teams and ensuring security is integral, not separate, to delivery.