Senior Software Security Architect – Cloud & AI Defenses

Kula Technologies Inc.; Greater London; Hybrid; GBP 90.000 - 130.000; Vollzeit

Zusammenfassung

Nothing is building a new breed of security-focused technology. The team in London leads backend security across cloud platforms, defining secure development standards and threat modelling approaches to protect our products and user data.

You will own the full security lifecycle, collaborate across platforms, and apply AI/LLMs to simulate threats while driving engineering defences in a fast-paced environment.

Qualifikationen

• 6+ years in application security, including security architecture you've designed for commercial products and services and have managed the posture of ongoing production.
• Deep threat modelling expertise. You can define the methodology for a company, not just follow one.
• Hands-on cloud security across AWS, GCP, Azure, and other global hyperscalers. You've secured backend services at real scale and depth of complexity.
• Command of the secure SDLC: SAST, DAST, SBOM and the judgement to know which findings matter.
• Experience applying AI or LLMs to security: simulating threats, probing defences, building countermeasures.
• Solid cryptography and identity fundamentals, including TLS, OAuth 2.0, SSO and token management. You write production-quality code in at least two of the languages such as Python, Go, Java, and C++, and know when to reach for each.
• You own a domain end to end, hold a high bar, and cut through ambiguity….

Aufgaben

• Own security lifecycle and secure architecture for Nothing's backend services and cloud platforms, from design to live operations across CI/CD pipelines.
• Define our secure development standards and wire SAST, DAST and SBOM tooling into how we ship.
• Own vulnerability management end to end: find issues, triage findings, and drive engineering teams to closure.
• Design our security testing, from penetration testing to fuzzing, and build tools other engineers can run without you.
• Ship network and server-side and data protection: API security, WAF, gateways, runtime defences, encryption in transit and at rest.
• Partner with our mobile, OS and desktop teams on client-side security tactics and strategy.
• Collaborate with our privacy and legal functions to engineer solutions to global regulatory requirements focusing on emergent technologies such as AI
• Lead threat modelling across authentication, data protection and input handling. Use AI and LLMs to simulate attacks before they happen, then collaborate with teams to build defences.

Kenntnisse

Security architecture

Threat modelling

Cloud security

Secure SDLC

AI/LLM security

Cryptography & identity

Python

Go

Java

C++

Tools

SAST tooling

DAST tooling

SBOM tooling

TLS/PKI tooling

Jobbeschreibung

Nothing is building a new breed of security-focused technology. The team in London leads backend security across cloud platforms, defining secure development standards and threat modelling approaches to protect our products and user data.

You will own the full security lifecycle, collaborate across platforms, and apply AI/LLMs to simulate threats while driving engineering defences in a fast-paced environment.