Security Architect

SoCode Limited; Cambridge; On-site; GBP 70,000 - 110,000; Full time

Job summary

SoCode Limited in Cambridge is seeking an experienced Security Architect to own software security across a diverse product portfolio. You will define strategy, standards, and architecture to embed security throughout the product lifecycle and work with engineering teams to balance security and delivery.

You will act as the technical authority on security, driving secure development across multiple product teams, leading reviews, and guiding vulnerability management and regulatory compliance

Qualifications

• Experience in security architecture across multi-product portfolios.
• Strong knowledge of SDLC and secure-by-design practices.
• Proven ability to embed threat modelling and security requirements.
• Experience driving security across CI/CD pipelines.
• Experience leading architecture reviews and security governance.
• Familiarity with regulatory frameworks (EU Cyber Resilience Act) is a plus.

Responsibilities

• Own the software security strategy and roadmap across the product line.
• Define security architecture, standards and best practices.
• Embed threat modelling and security requirements into product development.
• Collaborate with software and product teams to apply secure-by-design principles.
• Lead architecture reviews and security decision-making on major projects.
• Drive vulnerability management, remediation and security assurance activities.
• Improve CI/CD security and development tooling.
• Define release security criteria and support product assurance.
• Support compliance with emerging regulations including EU Cyber Resilience Act.

Skills

Security Architecture

Product Security

Secure SDLC

Threat Modelling

Vulnerability Management

Security Testing

CI/CD Security

Security Governance

Leadership

Job description

Location: Cambridge

Security Clearance: Must be eligible for UK SC Clearance

We're working with an innovative technology company in Cambridge that is looking for an experienced Security Architect to take ownership of software security across a diverse and complex product portfolio.

This is an opportunity to define the strategy, standards and architecture that underpin secure product development, whilst working closely with engineering teams to ensure security is embedded throughout the entire product lifecycle.

The Opportunity You'll be the technical authority for software security, influencing decisions from initial concept and design through to development, testing, release and ongoing maintenance.

Working across multiple product teams, you'll turn security objectives into practical engineering solutions, helping teams build secure, resilient products without slowing delivery.

What You'll Be Doing

• Owning the software security strategy and roadmap across the product line
• Defining security architecture, standards and best practices
• Embedding threat modelling and security requirements into product development
• Working closely with software and product teams to drive secure-by-design principles
• Leading architecture reviews and security decision-making on major projects
• Driving vulnerability management, remediation and security assurance activities
• Improving CI/CD security and development tooling
• Defining release security criteria and supporting product assurance
• Supporting compliance with emerging regulations including the EU Cyber Resilience Act
• Coaching and influencing teams to raise security maturity across the organisation

What We're Looking For

• Security Architecture
• Product Security
• Secure Software Development Lifecycle (SDLC)
• Threat Modelling
• Vulnerability Management
• Security Testing & Assurance
• Secure CI/CD Pipelines
• Risk Assessment & Security Governance
• Software Architecture and Engineering Leadership

Desirable Experience

• Embedded Systems
• Connected Devices / IoT
• Android Architecture
• Embedded Linux
• Mission-Critical Systems
• Product Security Standards and Regulatory Frameworks