Security Architect - Product and Application Security

Harrington Starr; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Harrington Starr in London is seeking a Security Architect to embed Secure by Design across cloud, application and product security. You'll influence designs from initial concepts through production, partnering with engineering, architecture and product teams.

The role emphasizes practical guidance, risk-based decision making and secure engineering practices within a fast-paced, regulated financial services environment. Hybrid work in London offers collaboration with global teams.

Qualifications

• Experience in security architecture and secure-by-design principles.
• Strong cloud security knowledge across AWS/Azure/GCP.
• Deep understanding of application security and product security.

Responsibilities

• Embed Secure by Design across cloud and app initiatives.
• Review architecture designs and assess security risks.
• Advise on secure architectures for cloud-native and microservices.

Skills

Security Architecture

Cloud Security

Application Security

SSDLC

Threat Modelling

DevSecOps

Kubernetes Security

IaC (Terraform/CloudFormation)

Vulnerability Management

IAM

Job description

Security Architect – Secure by Design | Cloud, Application & Product Security

Location: London (Hybrid)

We're partnering with a leading global financial organisation to recruit a Security Architect to join a high-performing Secure by Design team.

This is an opportunity to influence how security is embedded across modern technology platforms from the earliest stages of design through to production. Rather than acting as a traditional governance function, you'll work alongside engineering, architecture and product teams to ensure security enables innovation while supporting resilience, performance and regulatory expectations.

The environment is highly technical, supporting cloud-native applications, distributed systems and mission-critical platforms where availability, scalability and speed are essential.

The Role

As a Security Architect, you'll act as a trusted advisor to engineering and technology teams, providing practical security guidance throughout the software delivery lifecycle. You'll review solution designs, assess security risks and help shape architectures that are secure, scalable and fit for purpose.

You'll be involved in some of the organisation's most complex technology initiatives, partnering with architects, developers and technical leaders to influence key design decisions while balancing security, operational requirements and delivery objectives.

Key responsibilities include:

• Embedding Secure by Design principles across cloud and application development initiatives.
• Conducting security architecture and design reviews for new platforms and services.
• Performing risk-based security assessments and recommending pragmatic mitigation strategies.
• Advising on secure architecture for cloud-native, containerised and distributed environments.
• Working closely with engineering teams to integrate security into the Software Development Lifecycle (SDLC).
• Supporting Product Security initiatives across customer-facing and internal platforms.
• Developing reusable security patterns, reference architectures and technical standards.
• Collaborating with DevOps teams to improve security automation within CI/CD pipelines.
• Helping engineering teams adopt secure engineering practices without impacting delivery velocity.

What We're Looking For

You'll bring experience in several of the following areas:

• Security Architecture and Secure by Design
• Cloud Security (AWS, Azure and/or GCP)
• Application Security and Product Security
• Secure Software Development Lifecycle (SSDLC)
• Threat Modelling and Security Design Reviews
• DevSecOps and CI/CD Security
• Kubernetes, Containers and Microservices Security
• Infrastructure as Code (Terraform, CloudFormation or similar)
• Vulnerability Management and Secure Engineering
• Identity and Access Management
• Risk Assessment and Security Consultancy

You’ll be comfortable engaging with both technical and business stakeholders, translating complex security concepts into practical guidance and helping teams make informed, risk-based decisions.

Exposure to regulated environments, enterprise-scale technology platforms or financial services would be advantageous, although candidates from other complex engineering environments are also encouraged to apply.

Why Apply?

This is an opportunity to join a collaborative engineering-focused security team where you'll have genuine influence over the design of modern cloud platforms and digital products. You'll work with experienced architects and engineering teams on large-scale technology programmes, helping shape security strategy while remaining close to technology and delivery.

If you're passionate about Secure by Design, cloud security and enabling engineering teams to build secure, resilient applications at scale, we'd love to hear from you.