Senior AppSec Architect: Hybrid Work + Generous Benefits

Capital; Warszawa; Hybrid; PLN 250,000 - 400,000; Full time

Benefits offered by this job

Annual bonus

Generous annual leave

Medical insurance

Pension fund

Hybrid working model

Workation policy

Volunteer leave

Job summary

Capital.com seeks an experienced Application Security Architect to own secure-by-design patterns and set the security baseline across products. You will lead threat modelling, architecture reviews, and define security standards, guiding engineering teams without direct line management.

You will collaborate with Product Security and the Director of Product Security to enable secure delivery while preserving developer experience and speed.

Qualifications

• 8+ years in technology with 5+ years in application security.
• Proven track record creating and rolling out security standards.
• Threat-modelling experience across product portfolios.

Responsibilities

• Define secure-by-default architectures for web apps, mobile backends, microservices, APIs, and event-driven services.
• Lead security reviews of new products and major initiatives such as new auth flows and data flows.
• Own tooling strategy: SAST, DAST, IAST, SCA, and secrets scanning; ensure findings flow back to engineering.
• Drive secure SDLC improvements in collaboration with Engineering and Security leadership.

Skills

AppSec architecture

Threat modelling

Secure SDLC

AWS

OAuth 2.0/OIDC

Secure coding

CI/CD security

Communication

Regulatory compliance

Education

Bachelor's in CS or related

Tools

SAST

DAST

IAST

SCA

Secrets scanning

Job description

Capital.com seeks an experienced Application Security Architect to own secure-by-design patterns and set the security baseline across products. You will lead threat modelling, architecture reviews, and define security standards, guiding engineering teams without direct line management.

You will collaborate with Product Security and the Director of Product Security to enable secure delivery while preserving developer experience and speed.