Senior Security Consultant

10x Banking; City Of London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Remote enabled working

Private health insurance

Pension scheme

Sabbatical leave

Wellbeing programs

Flexible benefits

Job summary

10x Banking is transforming the financial industry with a cloud-native core banking platform and a mission to make banking 10x better. We seek a security-focused leader to partner with engineering and product teams to deliver secure, scalable cloud-native banking solutions.

You’ll lead threat modelling, design reviews and security guidance across platform, product and infrastructure initiatives, helping teams balance risk with delivery priorities while enabling secure adoption of AI tooling.

Qualifications

• Experience conducting security design reviews and threat modelling.
• Strong understanding of AWS security architecture and cloud security best practices.
• Experience securing Java-based microservices and distributed systems.
• Knowledge of OAuth2, OIDC, JWT and API security controls.
• Excellent stakeholder management and influencing skills.
• Ability to work independently in fast-moving engineering environments.

Responsibilities

• Lead threat modelling workshops for new products, services, AI tooling and architectural changes.
• Review solution designs and provide clear, actionable security recommendations.
• Assess risks across cloud-native and distributed systems architectures.
• Provide security support throughout the delivery lifecycle with architects and engineers.
• Shape secure API, microservices, data flows and cloud infrastructure designs.
• Define security requirements and compensating controls with delivery teams.
• Contribute to security standards and reference architectures for the business.
• Communicate technical risks clearly to technical and non-technical stakeholders.
• Drive remediation activities and ensure identified risks are managed.

Skills

Threat modelling

Security architecture

AWS security

API security

Stakeholder management

Security design reviews

Tools

AWS

Docker

Kubernetes

CI/CD security

Job description

We're on a mission to make banking 10x better.

At 10x Banking ("ten-ex banking") we're transforming the financial industry with our cloud-native core banking platform. 10x's platform powers global banks and financial institutions including Chase UK, Old Mutual and Westpac.

We offer a diverse, global community that thrives on innovation and collaboration. Tackling exciting challenges with the utmost integrity, we aim to make a positive impact through our work for our clients, their customers and the communities we work in.

Be part of something bigger – join us and transform and industry.

About the role...

• You’ll partner with engineering and product teams to deliver secure, scalable cloud-native banking solutions.
• Acting as a security partner, you’ll perform design reviews and threat modelling across platform, product and infrastructure initiatives.
• This role provides pragmatic security guidance that balances risk management with business and delivery objectives.
• You’ll become a trusted advisor to project teams, helping them make informed security decisions and remove delivery blockers.
• A key part of the role will be helping to build and operate practical security controls that support the safe adoption of agentic AI.

What you will do...

• Lead threat modelling workshops for new products, services, AI tooling and architectural changes.
• Review solution designs and provide clear, actionable security recommendations.
• You’ll assess risks across cloud-native and distributed systems architectures.
• Working closely with architects, engineers and product teams, you’ll provide security support throughout the delivery lifecycle.
• Help shape the secure design of APIs, microservices, data flows and cloud infrastructure.
• Support teams in defining security requirements and identifying appropriate compensating controls.
• Contribute to security standards, patterns and reference architectures that can be adopted across the business.
• Communicate technical risks clearly to both technical and non-technical stakeholders.
• This role will also involve driving remediation activities and helping ensure identified risks are managed effectively.

We're looking for...

• A pragmatic, delivery-focused approach to security.
• The ability to balance risk reduction with business outcomes.
• Strong communication skills, with the confidence to challenge constructively and influence effectively.
• Comfort working with ambiguity and rapidly evolving technology landscapes.
• A passion for enabling teams to build secure products, rather than simply enforcing compliance.

Ideally we are looking for...

• Significant experience in a Security Consultant, Security Architect or similar senior security role.
• Proven experience conducting security design reviews and threat modelling.
• Strong understanding of AWS security architecture and cloud security best practices.
• Experience securing Java-based microservices and distributed systems.
• Knowledge of modern authentication and authorisation patterns (OAuth2, OIDC, JWT, etc.).
• Experience assessing API security risks and controls.
• Strong stakeholder management and influencing skills.
• Ability to work independently and operate effectively in fast-moving engineering environments.

It would be great if you also had...

• Experience within financial services, fintech or regulated environments.
• Familiarity with containerised platforms (Docker, Kubernetes, ECS/EKS).
• Experience with CI/CD security, DevSecOps practices and automated security controls.
• Knowledge of secure software development practices and application security testing.
• Relevant certifications such as CISSP, CCSP, AWS Security Specialty or equivalent.

Benefits

• 25 days of holiday in addition to Bank/Public Holidays (with the option to swap some public holidays for alternative dates such as Diwali or Eid)
• 1 day off on or around your birthday
• 4 wellbeing days (1 additional paid day off per quarter, aimed at supporting you to maintain your personal wellbeing)
• Remote enabled working: scroll down to see the office requirements for this role
• Enhanced parental policies, including time off for fertility treatment
• Regular social gatherings and affinity groups
• Work from anywhere outside your typical working location - up to 4 weeks a year
• Career progression and learning pathways
• 1 paid volunteering day a year
• Sabbatical leave
• Options pool
• Private health insurance, with the option to add your family
• Pension scheme
• Enhanced company sick pay
• Life Assurance
• Income Protection
• Subscription to Headspace wellbeing app
• Flexible benefits via salary sacrifice

More about 10x

We are driven by the belief that whatever we do as a business has to be done in the right way. Our three core values of: Transformation, Integrity and Impact support this.

Discover what life is like at 10x over on Instagram and find out what the company is up to on LinkedIn.

10x Ways of Working

We recognise that a better work/life balance can improve people's motivation, performance and overall wellbeing. That's why if there's scope in the working day, we have flexibility around our core hours to do the things that matter to you.

We also know some work is done better at home and some is done better in the office, and that a one-size-fits-all approach doesn't enable high performance. That's why 10x is a remote-enabled organisation and supports agile working.

This role has an office attendance requirement of approx. 2 days per quarter, in agreement with your line manager.

Additionally, everyone comes together at our quarterly 10x Together Days to collaborate, align on strategy, and socialise. As all employees are employed on London-based contracts, commuting costs to the office are covered by employees and not by 10x.

Equal opportunities for all

At 10x, we are passionate about our people and are committed to fostering a more diverse and inclusive culture. We are building a community where every 10xer can bring their authentic self to work and feel empowered to reach their full potential. Our many employee networks help amplify this vision.

Alongside assessing technical capabilities to do the role, our assessment process will identify what you can uniquely bring to our 10x teams, and the potential you have to thrive here (learn more about our approach to assessment). Common to every role that 10xers perform, are 3 core competencies that we look for in our future 10xers - Business Impact, Change Driver & Delivery Excellence.

We are committed to ensuring all job applicants are treated equally and fairly and encourage applicants of all ethnicities, race, religion, sex, sexual orientation, gender identity, family or parental status, age, neurodiversity or disability status.

Accommodations

We recognise not everyone is the same. In fact, we embrace difference. If you require any form of accommodation during the interview process, please tell us so we can make arrangements to support. Any information that you provide will be recorded and maintained confidentially.

#LI-Hybrid