Enterprise Security Architect

Pepco Tech Hub; Porto; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid model

Health insurance

Meal allowance

Employee discount

Learning & development

International exposure

Job summary

Pepco Tech Hub is seeking an Enterprise Security Architect to shape and strengthen security foundations across our technology landscape. You will guide security architecture, application security and DevSecOps across the organisation, influencing strategy and secure-by-design practices.

You will work with architects, engineers and business stakeholders to embed security into roadmaps, drive threat modelling and enable secure development throughout the SDLC.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Software Engineering or a related field.
• 7+ years of experience in Cyber Security, Information Security or Technology Architecture.
• Proven experience securing enterprise and cloud-based applications.
• Strong knowledge of secure architecture and design principles.
• Fluent English (mandatory).

Responsibilities

• Lead security architecture reviews for applications, platforms and initiatives.
• Define and maintain security standards, reference architectures and secure patterns.
• Provide risk-based recommendations for solution designs and roadmaps.
• Embed security requirements into project delivery and development lifecycles.
• Promote secure-by-design principles and secure coding practices.
• Perform threat modelling and application security risk assessments.
• Review architectures, APIs and cloud-native solutions for security risks.
• Support remediation for vulnerabilities and weaknesses.

Skills

Security Architecture

DevSecOps

Threat Modelling

Cloud Security

OWASP Top 10

CI/CD Security

SAST/DAST

API Security

IAM

Stakeholder Management

Security Governance

Education

Bachelor's degree in Computer Science or related field

Tools

SAST tools

DAST tools

SCA tools

Job description

Build. Test. Deliver. Enjoy at Pepco!

About the role

We are looking for an Enterprise Security Architect to join our growing Cyber Security team.

In this role, you will help shape and strengthen the security foundations of our technology landscape, ensuring that applications, platforms and technology solutions are designed and delivered in line with enterprise security requirements and architectural principles. You will work closely with architects, engineers, developers and business stakeholders, providing expert guidance on security architecture, application security and DevSecOps practices across the organisation.

If you enjoy influencing technology strategy, driving secure-by-design principles and solving complex security challenges, you'll fit right in.

What you’ll be doing

• Lead security architecture reviews for applications, platforms and technology initiatives.
• Define and maintain security standards, reference architectures and secure design patterns.
• Provide security guidance and risk-based recommendations for solution designs.
• Ensure security requirements are embedded into technology roadmaps and project delivery.
• Promote secure-by-design principles and secure coding practices throughout the software development lifecycle.
• Perform threat modelling and application security risk assessments.
• Review application architectures, APIs, integrations and cloud-native solutions to identify security risks.
• Support remediation activities for identified vulnerabilities and security weaknesses.
• Embed security controls within CI/CD pipelines and development processes.
• Support the implementation of SAST, DAST and Software Composition Analysis (SCA) capabilities.
• Advise on software supply chain security and third‑party component risks.
• Collaborate with engineering teams to enhance security automation and governance.
• Provide security expertise to project teams, architects, product owners and technology leaders.
• Assess security risks, recommend mitigating controls and support risk treatment activities.
• Act as a trusted advisor on application security and cloud security matter.

What we’re looking for

• Bachelor's degree in Computer Science, Information Security, Software Engineering, Information Technology or a related field.
• 7+ years of experience in Cyber Security, Information Security or Technology Architecture.
• Experience in Security Architecture, Application Security Architecture or Solution Architecture.
• Proven experience securing enterprise and cloud-based applications.
• Strong knowledge of secure architecture and design principles.
• Good understanding of OWASP Top 10 and secure coding practices.
• Experience in threat modelling, application security and security testing methodologies.
• Hands-on knowledge of DevSecOps, Secure SDLC and CI/CD security.
• Experience with SAST, DAST and Software Composition Analysis (SCA) tools.
• Knowledge of API security, microservices security and cloud-native application security.
• Understanding of Identity and Access Management (IAM) principles.
• Experience working in Agile and DevOps environments.
• Strong analytical, problem-solving and risk-based decision-making skills.
• Excellent stakeholder management, communication and influencing capabilities.
• Fluent English (mandatory).

What we offer

• Hybrid model:2 days remote / 3 days onsite
• Office based in Porto: https://maps.app.goo.gl/Nn7hc6uYrmPiT8Fc9
• Competitive salary and annual bonus
• Health insurance from the month after joining
• Meal allowance
• Employee discount in Pepco stores in Portugal
• Learning and development opportunities
• International exposure and collaboration across markets
• A simple, down-to-earth culture where people support each other

About Pepco

Pepco is one of Europe’s fastest-growing retail companies, with thousands of stores and millions of customers visiting us every month. Behind that growth, there’s a team of people who make things happen. We keep things simple, we focus on results, and we support each other to get there. At Pepco, no two days are the same. And that’s exactly how we like it.