Senior Software Security Architect

Nothing; London (KY); On-site; USD 158,000 - 238,000; Full time

Job summary

Nothing is seeking a senior security engineer to own the security lifecycle for backend services and cloud platforms in London. You will define secure development standards, build tools, and drive vulnerability management with engineering teams.

You will lead threat modelling, implement SAST/DAST/SBOM, and collaborate with privacy and legal to address global regulations and emergent AI technologies. Expect a hands-on, architecture-focused role in a fast-growing company.

Qualifications

• 6+ years in application security and production posture management.
• Deep threat modelling expertise and ability to define methodologies.
• Hands-on cloud security across AWS, GCP, Azure and other hyperscalers.
• Secure SDLC governance: SAST, DAST, SBOM; know which findings matter.

Responsibilities

• Own security lifecycle and secure architecture for backend services and cloud platforms.
• Define secure development standards and integrate SAST, DAST and SBOM tooling.
• Lead vulnerability management end-to-end; triage findings and drive closure with engineers.
• Design security testing including pen testing and fuzzing; build reusable tools for others.
• Ship network, server-side and data protection: API security, WAF, encryption in transit and at rest.
• Collaborate with mobile/os/desktop teams on client-side security strategies.
• Work with privacy/legal to meet global regulations and emergent technologies like AI.
• Lead threat modelling across authentication, data protection and input handling; use AI/LLMs to simulate attacks.

Skills

Threat modelling

Cloud security

Secure SDLC

AI/LLMs in security

Cryptography & identity

Production-grade code

Security architecture

Tools

AWS

GCP

Azure

SBOM tooling

Job description

Nothing is seeking a senior security engineer to own the security lifecycle for backend services and cloud platforms in London. You will define secure development standards, build tools, and drive vulnerability management with engineering teams.

You will lead threat modelling, implement SAST/DAST/SBOM, and collaborate with privacy and legal to address global regulations and emergent AI technologies. Expect a hands-on, architecture-focused role in a fast-growing company.