Platform Security Lead: Cloud, Zero-Trust & Fintech

OwnBank; Taguig; On-site; PHP 1,500,000 - 2,300,000; Full time

Job summary

OwnBank is seeking a Senior Platform Security Architect to lead security architecture for cloud, APIs, and core banking integrations in a fintech environment. You will apply zero-trust design, threat modeling, and secure-by-design principles across applications and infrastructure.

You will drive DevSecOps practices, enforce security-as-code with Terraform and policy tooling, and oversee SIEM/SOAR while ensuring BSP, PCI-DSS, ISO 27001 compliance and vendor security reviews.

Qualifications

• Bachelor's degree in IT/security or related field.
• At least 7 years experience, with at least 3 in platform or cloud security within fintech or regulated industries.
• Deep knowledge of AWS/GCP, Kubernetes, IAM, Terraform, WAFs, encryption.
• Strong familiarity with BSP, DPA, PCI-DSS, ISO 27001, OWASP, MITRE ATT&CK.

Responsibilities

• Define secure reference architectures for cloud, APIs, core banking integrations.
• Lead threat modeling and secure architecture reviews of payment systems and onboarding workflows.
• Embed secure SDLC practices by integrating SAST, DAST, and secrets management into CI/CD.
• Enforce security-as-code and policy-as-code using Terraform, OPA.
• Automate platform compliance checks via Cloud Custodian, Prisma Cloud, or CSPM tools.
• Oversee SIEM, SOAR, and threat detection systems for real-time monitoring.
• Direct incident triage, forensics, and investigation efforts during platform-level security events.
• Lead risk assessments and third-party security certifications.
• Review API authentication, rate limiting, encryption, and onboarding controls; oversee audits.

Skills

Cloud security

Threat modeling

Security architecture

Security operations

GRC

Education

Bachelor's degree in Information Technology or Security, Cybersecurity, Computer Science, or Engineering

Tools

AWS

GCP

Kubernetes

Terraform

WAFs

IAM

OPA

Job description

OwnBank is seeking a Senior Platform Security Architect to lead security architecture for cloud, APIs, and core banking integrations in a fintech environment. You will apply zero-trust design, threat modeling, and secure-by-design principles across applications and infrastructure.

You will drive DevSecOps practices, enforce security-as-code with Terraform and policy tooling, and oversee SIEM/SOAR while ensuring BSP, PCI-DSS, ISO 27001 compliance and vendor security reviews.