Senior Application Security Architect

Allwyn UK; Warrington; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Company Bonus Scheme

Matched pension up to 8.5%

26 days annual leave + 2 Life Days

Single Private Health Cover

Wellness Allowance £500

Volunteer Days

Job summary

Allwyn UK is seeking an experienced security architect to shape secure designs for customer-facing and enterprise applications across web, mobile, API and cloud services. You will influence architecture, define patterns, and guide security testing while embedding security throughout the software development lifecycle.

This architecture-led role requires practical depth in application security, threat modelling, secure SDLC, and collaboration with engineering, product, and external vendors to

Qualifications

• Significant experience in application security architecture within an enterprise environment.
• Security design experience across modern web apps, mobile apps and APIs.
• Strong knowledge of common web, mobile and API threats and controls.
• Threat modelling with clear, traceable security requirements.
• Secure SDLC, DevSecOps, Agile delivery and CI/CD security.

Responsibilities

• Provide security architecture support to mobile and web application initiatives from discovery through operation.
• Partner with solution architects, software engineers, product teams and third parties to design security in early.
• Produce and maintain security designs, requirements, decisions, patterns and assurance evidence.
• Lead threat modelling using STRIDE and document threats, attack paths and mitigations.
• Assess web, mobile apps, APIs, microservices, identity flows, cloud services and third-party integrations.
• Define security requirements for authentication, authorization, session management, secrets, cryptography and data protection.
• Apply OWASP guidance and secure-by-design principles.
• Guide teams on secure mobile and web design, including storage, permissions, transport security and controls.
• Advise on security testing strategy: SAST, DAST, SCA, API and penetration testing.
• Support integration of security controls and automated testing into CI/CD pipelines.
• Review findings, prioritize remediation and coordinate actions.
• Produce penetration test scopes and coordinate testing.
• Identify and communicate security risks and gaps clearly.
• Contribute to reusable security patterns and reference architectures.
• Coach teams on secure design and threat modelling.

Skills

App security architecture

Security engineering

Threat modelling

DevSecOps/CI/CD security

Security testing (SAST/DAST/SSCA)

Identity and access management

Cloud-native security

Data protection

Communication and advisory skills

Tools

Burp Suite

OWASP ZAP

Snyk

SonarQube

Job description

Allwyn UK is seeking an experienced security architect to shape secure designs for customer-facing and enterprise applications across web, mobile, API and cloud services. You will influence architecture, define patterns, and guide security testing while embedding security throughout the software development lifecycle.

This architecture-led role requires practical depth in application security, threat modelling, secure SDLC, and collaboration with engineering, product, and external vendors to