Senior Software Security Architect

Huston Photos; Reading; Remote; GBP 60,000 - 100,000; Full time

Job summary

An award-winning technology firm is seeking a Senior Software Security Architect to enhance their application security practices. In this hands-on role, you will establish a secure Software Development Life Cycle (SDLC) and promote a 'Secure by Design' approach across all teams. You'll work closely with engineering and architecture teams, providing expert security advice and ensuring compliance with security standards. This remote position offers a generous holiday allowance, private health insurance, and opportunities for career progression. Join a forward-thinking company committed to innovation and security.

Benefits

Generous holiday allowance

Pension scheme

Private health insurance

Remote working

Training opportunities

Career progression

Family-friendly policies

Qualifications

• Proven experience in Software Development Life Cycle (SDLC) and application security.
• Strong understanding of software development, testing, and multiple programming languages.

Responsibilities

• Develop and maintain application security architecture across the organization.
• Collaborate with teams to embed security in all development and deployment processes.

Skills

C++

C#

.NET Core

Java

JavaScript

Node.js

Angular

React

Application Security

OWASP Top10

Agile

Cloud Security

ISO 27001

NIST

GDPR

Tools

GitHub

Jenkins

Bamboo

Job description

Join to apply for the Senior Software Security Architect role at William Huston Photography.

We are searching for a Senior Software Security Architect / Senior Application Security Architect for a marketing leading and award-winning technology and data-driven business.

The position is offered on a remote basis.

This role is hands-on and very software engineering focused. You will be responsible for establishing a secure SDLC and 'Secure by Design' approach/practice to be used by all of the Architecture and Software development teams.

The Role Will Involve

1. Developing, implementing, and maintaining application security architecture across the organization.
2. Ensuring systems are designed with speed, scalability, robustness, zero-trust, automation, and supportability at the core.
3. Collaborating with the Architecture and Engineering Team to embed security in all development and deployment processes.
4. Providing expert software security advice (design, coding, testing) to the Software Engineering Community, InfoSec, DevOps, and other teams.
5. Defining and delivering secure software development practices to the engineering teams.
6. Escalating issues appropriately within the organization.
7. Interfacing with customers to ensure security obligations are met.

About You

To be considered, you should have a successful track record and practical experience in the Software Development Life Cycle (SDLC), with a strong understanding of software development, testing, and multiple programming languages such as C++, C#, .NET Core, Java, JavaScript, Node.js, Angular, React, or similar.

You will also have:

• Experience creating application security strategies, standards, and best practices.
• Experience working with security issues in software architecture, development, including static/dynamic analysis, dependency checks, OWASP Top10, and threat modeling.
• Experience in an Agile environment with modern CI/CD tools like GitHub, Jenkins, Bamboo.
• Ability to translate security policies into effective security controls.
• Knowledge of security standards and regulations such as ISO 27001, NIST, GDPR.
• Experience with open-source security tools and securing Azure cloud workloads.

Note: Applicants must have the Right to Work in the UK and be based in the UK.

Benefits include:

• Generous holiday allowance, pension scheme, private health insurance, and more.
• Remote working, training, career progression, and family-friendly policies.

Keywords

Senior Software Security Architect, SDLC, Secure by Design, Application Security, Architecture, Software Development, DevOps, InfoSec, Security, Programming Languages, OWASP, Agile, Cloud, Azure, GDPR, ISO 27001, NIST.

Due to high application volumes, only suitable candidates will be contacted. We promote equality and diversity in the workplace.

Additional Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology
• Industries: Computer and Network Security