Security Architect - Apps, APIs & Cloud Security (12m FTC)

Allwyn UK; England; On-site; GBP 80,000 - 100,000; Full time

Benefits offered by this job

Company Bonus Scheme

Matched pension up to 8.5%

Private health cover

Wellbeing support

Job summary

Allwyn UK is seeking a Security Architect for a 12-month fixed-term contract within the Enterprise Security team. You will provide specialist security architecture for customer-facing and enterprise applications across web, mobile, API and cloud services, shaping secure designs from discovery through delivery.

You will lead threat modelling, define patterns, guide security testing, and advise on risk to engineers and business stakeholders, ensuring secure development across SDLC and CI/CD.

Qualifications

• Extensive experience in application security architecture within an enterprise.
• Security design across web, mobile and API platforms.
• Strong knowledge of web, mobile and API threats and mitigations.
• Practical threat modelling translating findings into security requirements.
• Secure SDLC, DevSecOps, Agile delivery and CI/CD security understanding.
• Experience defining and interpreting application security testing (SAST, DAST, SCA).
• IAM knowledge: authentication, authorization, federation, tokens and session security.
• Understanding of cloud-native architecture: containers, serverless, microservices.
• Ability to assess data flows and define data protection controls.
• Strong written and verbal communication, clear risk-based advice.

Responsibilities

• Provide security architecture support to mobile and web initiatives from discovery through operation.
• Collaborate with solution architects, engineers, product teams and third parties to bake security in early without losing pace, cost, usability and quality.
• Produce and maintain security designs, security requirements, architecture decisions, patterns and evidence.
• Lead threat modelling using STRIDE and document threats, attack paths, trust boundaries, mitigations and residual risks.
• Assess web, mobile, API, microservices and cloud services for security controls.
• Define security requirements for authentication, authorization, session management, data protection and logging.
• Apply OWASP Top 10, ASVS, MASVS and secure-by-design principles.
• Guide teams on secure mobile/web design and testing strategies.
• Advise on testing strategy: SAST, DAST, SCA, API, mobile and penetration testing.
• Support CI/CD integration of security controls and quality gates.
• Review findings, prioritise remediation by risk and support pragmatic actions.
• Produce penetration test scopes and coordinate testing.

Skills

Application security

Threat modelling

Security architecture

CI/CD security

Communication

Tools

Burp Suite

OWASP ZAP

Snyk

SonarQube

Job description

Allwyn UK is seeking a Security Architect for a 12-month fixed-term contract within the Enterprise Security team. You will provide specialist security architecture for customer-facing and enterprise applications across web, mobile, API and cloud services, shaping secure designs from discovery through delivery.

You will lead threat modelling, define patterns, guide security testing, and advise on risk to engineers and business stakeholders, ensuring secure development across SDLC and CI/CD.