Security Architect – App & Cloud Threat Modeling

Allwyn UK; Warrington; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Company Bonus Scheme

Matched pension contributions

26 days annual leave + 2 Life Days

Private Health Cover

Wellness Allowance

Job summary

Allwyn UK is seeking a Security Architect to lead architecture for customer-facing and enterprise applications, shaping secure designs across web, mobile, API and cloud services. You will translate risk into security requirements and guide engineering teams in embedding security throughout the SDLC.

This architecture-led role entails defining reusable patterns, conducting threat modelling, and advising on testing strategies (SAST/DAST/IAST) and CI/CD integration to support a risk-based security

Qualifications

• Significant experience in application security architecture within an enterprise environment.
• Security design across modern web/mobile applications and APIs.
• Knowledge of common web, mobile and API threats and appropriate security controls.
• Practical experience of threat modelling and translating findings into clear, traceable security requirements.
• Good understanding of secure SDLC, DevSecOps, Agile delivery and CI/CD security.
• Experience defining and interpreting application security testing including SAST, DAST, SCA, API, mobile and penetration testing.
• Knowledge of application identity and access management (authentication, authorization, federation, tokens, session security).
• Understanding of cloud-native architecture (containers, serverless, microservices).

Responsibilities

• Provide security architecture support to mobile and web application initiatives from discovery through build, testing, release and operation.
• Partner with solution architects, software engineers, product teams and third parties to embed security early while maintaining pace and quality.
• Produce and maintain high-level and detailed security designs, requirements, decisions and patterns.
• Lead application threat modelling and document threats, attack paths and mitigations.
• Assess web applications, APIs, microservices, cloud services and third-party integrations for security controls.
• Define security requirements for authentication, authorization, secrets, cryptography and data protection.

Skills

Application security architecture

Threat modelling

Secure SDLC

CI/CD security

Web/mobile/API security

Cloud-native security

Tools

Burp Suite

OWASP ZAP

Snyk

SonarQube

Job description

Allwyn UK is seeking a Security Architect to lead architecture for customer-facing and enterprise applications, shaping secure designs across web, mobile, API and cloud services. You will translate risk into security requirements and guide engineering teams in embedding security throughout the SDLC.

This architecture-led role entails defining reusable patterns, conducting threat modelling, and advising on testing strategies (SAST/DAST/IAST) and CI/CD integration to support a risk-based security