Security Architect

Location: Cambridge

Security Clearance: Must be eligible for UK SC Clearance

We're working with an innovative technology company in Cambridge that is looking for an experienced Security Architect to take ownership of software security across a diverse and complex product portfolio.

This is an opportunity to define the strategy, standards and architecture that underpin secure product development, whilst working closely with engineering teams to ensure security is embedded throughout the entire product lifecycle.

The Opportunity You'll be the technical authority for software security, influencing decisions from initial concept and design through to development, testing, release and ongoing maintenance.

Working across multiple product teams, you'll turn security objectives into practical engineering solutions, helping teams build secure, resilient products without slowing delivery.

What You'll Be Doing

Owning the software security strategy and roadmap across the product line

Defining security architecture, standards and best practices

Embedding threat modelling and security requirements into product development

Working closely with software and product teams to drive secure-by-design principles

Leading architecture reviews and security decision-making on major projects

Driving vulnerability management, remediation and security assurance activities

Improving CI/CD security and development tooling

Defining release security criteria and supporting product assurance

Supporting compliance with emerging regulations including the EU Cyber Resilience Act

Coaching and influencing teams to raise security maturity across the organisationWhat We're Looking For You'll likely bring experience in:

Security Architecture

Product Security

Secure Software Development Lifecycle (SDLC)

Threat Modelling

Vulnerability Management

Security Testing & Assurance

Secure CI/CD Pipelines

Risk Assessment & Security Governance

Software Architecture and Engineering LeadershipDesirable Experience

Embedded Systems

Connected Devices / IoT

Android Architecture

Embedded Linux

Mission-Critical Systems

Product Security Standards and Regulatory Frameworks