Principal Security Architect - DevSecOps

UST FinX; United Kingdom; On-site; GBP 140,000 - 190,000; Full time

Job summary

UST FinX is seeking a Principal Security Architect – DevSecOps in the United Kingdom to embed security across the software delivery lifecycle and shape the security strategy of a modern banking platform.

You will lead secure-by-design initiatives, drive automated controls across CI/CD, cloud infrastructure, containers, and APIs, and mentor engineering teams while balancing security with developer experience.

Qualifications

• Hands-on experience embedding security into the SDLC.
• Strong background in software engineering, cloud architecture, or platform engineering.
• Experience securing cloud-native platforms and containers.

Responsibilities

• Define and evolve the security architecture strategy across the UST FinX platform.
• Embed security throughout the SDLC from design to runtime operations.
• Design automated security controls across CI/CD, cloud, containers, and APIs.
• Drive security automation, policy-as-code, vulnerability management, and runtime protection.
• Establish secure engineering standards and guardrails.
• Mentor teams through threat modelling and architecture/code reviews.

Skills

DevSecOps

Cloud architecture

Platform engineering

Kubernetes

CI/CD pipelines

Security automation

Threat modelling

Code reviews

Security best practices

Stakeholder engagement

Tools

Kubernetes

CI/CD Pipelines

IAM

Secrets management

Cloud environments

Job description

Principal Security Architect – DevSecOps

Location: United Kingdom | Reports to: CTO, UST FinX

Help Secure the Future of Banking

At UST FinX, we're helping financial institutions modernize legacy banking platforms through API-first, cloud-native architectures. Our mission is to enable banks to innovate faster while maintaining the resilience, security, and control required in regulated environments.

We're looking for a Principal Security Architect – DevSecOps to embed security into every stage of the software delivery lifecycle.

This is a hands-on technical leadership role, not a governance, compliance, or audit-focused position. You'll work alongside engineering teams to build secure-by-default platforms, automate security controls, and shape the security strategy of a modern banking transformation platform.

What You'll Do

• Define and evolve the security architecture strategy across the UST FinX platform.
• Embed security throughout the SDLC, from design and development through deployment and runtime operations.
• Design automated security controls across CI/CD pipelines, cloud infrastructure, containers, APIs, and platform services.
• Drive adoption of security automation, vulnerability management, policy-as-code, secrets management, and runtime protection.
• Establish secure engineering standards and reusable security guardrails.
• Partner with architects, engineers, DevOps, and product teams to ensure security is built into platforms by design.
• Mentor teams through threat modelling, architecture reviews, code reviews, and security best practices.

What We're Looking For

• Strong background in software engineering, cloud architecture, or platform engineering.
• Deep expertise in DevSecOps, cloud-native security, and secure software delivery.
• Hands-on experience securing Kubernetes/container platforms, CI/CD pipelines, APIs, IAM, secrets management, and cloud environments.
• Experience implementing security automation, policy-as-code, vulnerability management, and security testing.
• Ability to balance security, developer experience, delivery speed, and operational resilience.
• Strong stakeholder engagement, mentoring, and technical leadership skills.

Why Join UST FinX?

• Report directly to the CTO and influence platform-wide security strategy
• Build secure-by-design banking technology used by leading financial institutions
• Drive modern DevSecOps practices across a cloud-native engineering organisation
• Work with globally distributed, high-calibre engineering teams
• Remain deeply hands-on while shaping strategic direction

If you're passionate about building secure cloud-native platforms and want to set the security standard for the next generation of banking technology, we'd love to hear from you.