Security Architect

<p class="text-muted mb-3">Location: Cambridge </p>

<p class="text-muted mb-3">Security Clearance: Must be eligible for UK SC Clearance</p>

<p class="text-muted mb-3">We're working with an innovative technology company in Cambridge that is looking for an experienced Security Architect to take ownership of software security across a diverse and complex product portfolio.</p>

<p class="text-muted mb-3">This is an opportunity to define the strategy, standards and architecture that underpin secure product development, whilst working closely with engineering teams to ensure security is embedded throughout the entire product lifecycle.</p>

<p class="text-muted mb-3">The Opportunity You'll be the technical authority for software security, influencing decisions from initial concept and design through to development, testing, release and ongoing maintenance.</p>

<p class="text-muted mb-3">Working across multiple product teams, you'll turn security objectives into practical engineering solutions, helping teams build secure, resilient products without slowing delivery.</p>

<p class="text-muted mb-3">What You'll Be Doing</p>

<p class="text-muted mb-3">Owning the software security strategy and roadmap across the product line</p>

<p class="text-muted mb-3">Defining security architecture, standards and best practices</p>

<p class="text-muted mb-3">Embedding threat modelling and security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements into product development</h5>

<p class="text-muted mb-3">Working closely with software and product teams to drive secure-by-design principles</p>

<p class="text-muted mb-3">Leading architecture reviews and security decision-making on major projects</p>

<p class="text-muted mb-3">Driving vulnerability management, remediation and security assurance activities</p>

<p class="text-muted mb-3">Improving CI/CD security and development tooling</p>

<p class="text-muted mb-3">Defining release security criteria and supporting product assurance</p>

<p class="text-muted mb-3">Supporting compliance with emerging regulations including the EU Cyber Resilience Act</p>

<p class="text-muted mb-3">Coaching and influencing teams to raise security maturity across the organisationWhat We're Looking For You'll likely bring experience in:</p>

<p class="text-muted mb-3">Security Architecture</p>

<p class="text-muted mb-3">Product Security</p>

<p class="text-muted mb-3">Secure Software Development Lifecycle (SDLC)</p>

<p class="text-muted mb-3">Threat Modelling</p>

<p class="text-muted mb-3">Vulnerability Management</p>

<p class="text-muted mb-3">Security Testing & Assurance</p>

<p class="text-muted mb-3">Secure CI/CD Pipelines</p>

<p class="text-muted mb-3">Risk Assessment & Security Governance</p>

<p class="text-muted mb-3">Software Architecture and Engineering LeadershipDesirable Experience</p>

<p class="text-muted mb-3">Embedded Systems</p>

<p class="text-muted mb-3">Connected Devices / IoT</p>

<p class="text-muted mb-3">Android Architecture</p>

<p class="text-muted mb-3">Embedded Linux</p>

<p class="text-muted mb-3">Mission-Critical Systems</p>

<p class="text-muted mb-3">Product Security Standards and Regulatory Frameworks</p>