Enterprise Security Architect

Pepco Iberia; Porto; Hybrid; EUR 85,000 - 120,000; Full time

Benefits offered by this job

Health insurance

Meal allowance

Employee discount in Pepco stores in {

Job summary

Pepco Iberia is seeking an Enterprise Security Architect to strengthen security foundations across applications, platforms and technology solutions. You will work with architects, engineers and business stakeholders to guide secure architecture, DevSecOps, and risk-based design decisions.

The role focuses on embedding security into roadmaps, promoting secure-by-design practices, and leading threat modelling and security assessments in a fast-paced environment.

Qualifications

• Bachelor's degree in CS, InfoSec, SWE, IT or related field.
• 7+ years in Cyber Security, Info Security or Technology Architecture.
• Experience in Security Architecture, App Security or Solution Architecture.
• Proven experience securing enterprise and cloud-based apps.
• Strong knowledge of secure architecture and design principles.
• Fluent English (mandatory).

Responsibilities

• Lead security architecture reviews for applications, platforms and technology initiatives.
• Define and maintain security standards, reference architectures and secure design patterns.
• Provide security guidance and risk-based recommendations for solution designs.
• Ensure security requirements are embedded into roadmaps and project delivery.
• Promote secure-by-design principles and secure coding practices throughout SDLC.
• Perform threat modelling and application security risk assessments.
• Review architectures, APIs, integrations and cloud-native solutions for risks.
• Support remediation activities for identified vulnerabilities and weaknesses.

Skills

Security architecture

Threat modelling

DevSecOps

CI/CD security

Security testing

Risk-based decision making

Stakeholder management

English fluency

Education

Bachelor's degree in CS/InfoSec/SWE/IT

Tools

SAST tools

DAST tools

SCA tools

CI/CD security tooling

Job description

Build. Test. Deliver. Enjoy at Pepco!

We are looking for an Enterprise Security Architect to join our growing Cyber Security team.

About The Role

In this role, you will help shape and strengthen the security foundations of our technology landscape, ensuring that applications, platforms and technology solutions are designed and delivered in line with enterprise security requirements and architectural principles. You will work closely with architects, engineers, developers and business stakeholders, providing expert guidance on security architecture, application security and DevSecOps practices across the organisation.

If you enjoy influencing technology strategy, driving secure-by-design principles and solving complex security challenges, you'll fit right in.

What You’ll Be Doing

• Lead security architecture reviews for applications, platforms and technology initiatives.
• Define and maintain security standards, reference architectures and secure design patterns.
• Provide security guidance and risk-based recommendations for solution designs.
• Ensure security requirements are embedded into technology roadmaps and project delivery.
• Promote secure-by-design principles and secure coding practices throughout the software development lifecycle.
• Perform threat modelling and application security risk assessments.
• Review application architectures, APIs, integrations and cloud-native solutions to identify security risks.
• Support remediation activities for identified vulnerabilities and security weaknesses.
• Embed security controls within CI/CD pipelines and development processes.
• Support the implementation of SAST, DAST and Software Composition Analysis (SCA) capabilities.
• Advise on software supply chain security and third-party component risks.
• Collaborate with engineering teams to enhance security automation and governance.
• Provide security expertise to project teams, architects, product owners and technology leaders.
• Assess security risks, recommend mitigating controls and support risk treatment activities.
• Act as a trusted advisor on application security and cloud security matter.

What We’re Looking For

• Bachelor's degree in Computer Science, Information Security, Software Engineering, Information Technology or a related field.
• 7+ years of experience in Cyber Security, Information Security or Technology Architecture.
• Experience in Security Architecture, Application Security Architecture or Solution Architecture.
• Proven experience securing enterprise and cloud-based applications.
• Strong knowledge of secure architecture and design principles.
• Good understanding of OWASP Top 10 and secure coding practices.
• Experience in threat modelling, application security and security testing methodologies.
• Hands‑on knowledge of DevSecOps, Secure SDLC and CI/CD security.
• Experience with SAST, DAST and Software Composition Analysis (SCA) tools.
• Knowledge of API security, microservices security and cloud-native application security.
• Understanding of Identity and Access Management (IAM) principles.
• Experience working in Agile and DevOps environments.
• Strong analytical, problem‑solving and risk‑based decision‑making skills.
• Excellent stakeholder management, communication and influencing capabilities.
• Fluent English (mandatory).

What We Offer

• Hybrid model:2 days remote / 3 days onsite
• Office based in Porto: https://maps.app.goo.gl/Nn7hc6uYrmPiT8Fc9
• Competitive salary and annual bonus
• Health insurance from the month after joining
• Meal allowance
• Employee discount in Pepco stores in Portugal
• Learning and development opportunities
• International exposure and collaboration across markets
• A simple, down-to-earth culture where people support each other

About Pepco

Pepco is one of Europe’s fastest-growing retail companies, with thousands of stores and millions of customers visiting us every month. Behind that growth, there’s a team of people who make things happen. We keep things simple, we focus on results, and we support each other to get there. At Pepco, no two days are the same. And that’s exactly how we like it.