Enable job alerts via email!

Senior Security Architect

ION

London

On-site

GBP 80,000 - 100,000

Full time

30+ days ago

Boost your interview chances

Create a job specific, tailored resume for higher success rate.

Job summary

Join a visionary firm that leads the way in trading and workflow automation solutions! In this exciting role, you will be responsible for establishing secure development policies, enabling security automation, and creating a state-of-the-art secure cloud architecture. Collaborate with diverse teams to ensure top security standards and help cultivate a security culture throughout the organization. If you're passionate about security and innovation, this is your chance to make a significant impact in a dynamic environment where your contributions are valued and recognized.

Qualifications

  • Experience in Threat Modeling and security automation.
  • Strong knowledge of public cloud security management.

Responsibilities

  • Establish policies for secure development and cloud principles.
  • Automate audit evidence collection for compliance reporting.
  • Monitor security metrics to improve security standards.

Skills

Threat Modeling
Authentication/Authorization Standards
Application of Encryption
Managing Security in Public Clouds
Secure Microservices Architectures
Networking Knowledge
SSDLC Practices in DevOps
Penetration Testing
Designing Security Monitoring Tools
Researching Security Threats

Education

SANS/SEC-540: Cloud Security and DevSecOps Automation
Systems Security Certified Practitioner (SSCP)
Certified Information Systems Security Professional (CISSP)
Certified Authorization Professional (CAP)
Certified Secure Software Lifecycle Professional (CSSLP)

Tools

AWS
Azure
GCP
Kubernetes
Openshift

Job description

About us

We’re visionary innovators who provide trading and workflow automation solutions, high-value analytics, and strategic consulting to corporations, financial institutions, central banks, and governments. More than 40% of the world’s largest companies use our solutions. We’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.

At ION, we offer careers that provide many opportunities: To invent. To design. To collaborate. To build. To transform businesses and empower people around the world to do more, faster and better than before. Imagine what you can do and experience. This is where you can do your best work.

Learn more at iongroup.com.

Your role

Your duties and responsibilities:

  1. Establish policies and procedures that promote secure development/cloud principles.
  2. Enable security automation through tools to reduce vulnerabilities and flaws due to human errors.
  3. Automate audit evidence collection throughout the SDLC to facilitate compliance reporting.
  4. Monitor security metrics to continuously improve and stay one step ahead of the red team.
  5. Maintain strong and continuous engagement with teams to ensure the ION Cloud architecture and operating model is up to the top security standards.
  6. Create a state-of-the-art secure cloud architecture and strategy, supported by a robust and flexible infrastructure with reliable and efficient operating model.
  7. Run post-mortem incidents analysis.
  8. Review the security principles compliancy of deployment, maintenance, monitoring, and management processes.
  9. Cooperate with the software architect to ensure that security aspects are considered in the software architecture.
  10. Regularly evaluate the best cloud applications, hardware, and practices available in the security domain.
  11. Provide training and guidance to the rest of the organization, helping with the development of a security culture throughout the company.
  12. Help the product owner in refining security requirements so that they fit in the customer’s strategy and become a selling point.

Other duties

We might ask you to perform other tasks and duties as your role expands.

Your skills, experience, and qualifications

Skills:

  1. Threat Modeling.
  2. Authentication/authorization standards and implementations.
  3. Application of encryption at rest and in transit.
  4. Certificates/secrets standards and implementations.
  5. Managing security in public clouds (AWS, Azure, GCP), with at least 3 years specific experience in either AWS or Azure.
  6. Secure microservices architectures in a cloud-native environment.
  7. Strong understanding of networking.
  8. Knowledge of different deployment models (Container, Serverless, Cloud, PaaS, IaaS …).
  9. Ability to work with diverse, remote, and distributed teams across multiple regions and time zones.
  10. Ability to do research autonomously to always be ahead of any security threat.
  11. SSDLC practices in DevOps, CI/CD environment.
  12. OWASP Top 10, SANS CWE, OpenSAMM, BSIMM, etc.
  13. Penetration testing, vulnerability scanning.
  14. Design security monitoring tools.
  15. Designing pipelines that make use of SCA, SAST, DAST, IAST and RASP solutions.

Qualifications:

  1. SANS/SEC-540: Cloud Security and DevSecOps Automation.
  2. Systems Security Certified Practitioner (SSCP).
  3. Certified Information Systems Security Professional (CISSP).
  4. Certified Authorization Professional (CAP).
  5. Certified Secure Software Lifecycle Professional (CSSLP).
  6. HealthCare Information Security and Privacy Practitioner (HCISPP).

Experience:

  1. Multi-year experience in Threat Modeling.
  2. A proven track record as architect and consultant, capable of working directly with teams, embedded in the delivery model.
  3. Experience with Kubernetes, Openshift, Service Mesh.
  4. Experience with clouds (AWS, Azure, GCP).
  5. Experience with getting or maintaining certified standards (i.e.ISO 27001, PCI DSS, MIL-SPEC).

Contract Type:

Full-time, permanent contract.

Important notes (Italy):

According to the Italian Law (L.68/99), please note that candidates from the disability list will be given priority.

Due to the high volume of applications, only those candidates that meet the required criteria for selection will be contacted.

If you’re from a non-EU country, you must have a valid EU visa or work permit.

Get your free, confidential resume review.
or drag and drop a PDF, DOC, DOCX, ODT, or PAGES file up to 5MB.

Similar jobs

Senior Data Architect - Databricks

ZipRecruiter

London

Remote

GBP 60.000 - 100.000

14 days ago

Senior Security Architect (Network & Cloud) - Remote (UK)

ZipRecruiter

London

Remote

GBP 70.000 - 110.000

15 days ago

Senior Software Security Architect

Huston Photos

Reading

Remote

GBP 60.000 - 100.000

25 days ago

Senior Software Engineer

TipTopJob

London

Remote

GBP 70.000 - 90.000

4 days ago
Be an early applicant

Senior Software Engineer in Test - Data

Fruition Group

Greater London

Remote

GBP 75.000 - 95.000

5 days ago
Be an early applicant

Senior Software Engineer

SevenRooms

London

Remote

GBP 60.000 - 85.000

6 days ago
Be an early applicant

Senior Security Architect

JR United Kingdom

Remote

GBP 70.000 - 110.000

14 days ago

Senior Software Engineer

Amicus

Greater London

Remote

GBP 75.000 - 90.000

7 days ago
Be an early applicant

Senior Security Architect Consultant - Defence & Aviation

NTT DATA

Greater London

Hybrid

GBP 70.000 - 90.000

6 days ago
Be an early applicant