Security Architect: Lead Secure-by-Design for Complex Apps

SoCode Limited; Cambridge; In loco; GBP 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

SoCode Limited in Cambridge is seeking an experienced Security Architect to own software security across a diverse product portfolio. You will define strategy, standards, and architecture to embed security throughout the product lifecycle and work with engineering teams to balance security and delivery.

You will act as the technical authority on security, driving secure development across multiple product teams, leading reviews, and guiding vulnerability management and regulatory compliance

Competenze

• Experience in security architecture across multi-product portfolios.
• Strong knowledge of SDLC and secure-by-design practices.
• Proven ability to embed threat modelling and security requirements.
• Experience driving security across CI/CD pipelines.
• Experience leading architecture reviews and security governance.
• Familiarity with regulatory frameworks (EU Cyber Resilience Act) is a plus.

Mansioni

• Own the software security strategy and roadmap across the product line.
• Define security architecture, standards and best practices.
• Embed threat modelling and security requirements into product development.
• Collaborate with software and product teams to apply secure-by-design principles.
• Lead architecture reviews and security decision-making on major projects.
• Drive vulnerability management, remediation and security assurance activities.
• Improve CI/CD security and development tooling.
• Define release security criteria and support product assurance.
• Support compliance with emerging regulations including EU Cyber Resilience Act.

Conoscenze

Security Architecture

Product Security

Secure SDLC

Threat Modelling

Vulnerability Management

Security Testing

CI/CD Security

Security Governance

Leadership

Descrizione del lavoro

SoCode Limited in Cambridge is seeking an experienced Security Architect to own software security across a diverse product portfolio. You will define strategy, standards, and architecture to embed security throughout the product lifecycle and work with engineering teams to balance security and delivery.

You will act as the technical authority on security, driving secure development across multiple product teams, leading reviews, and guiding vulnerability management and regulatory compliance