Security Architect

Location: Cambridge 
Security Clearance: Must be eligible for UK SC Clearance

We're working with an innovative technology company in Cambridge that is looking for an experienced Security Architect to take ownership of software security across a diverse and complex product portfolio.

This is an opportunity to define the strategy, standards and architecture that underpin secure product development, whilst working closely with engineering teams to ensure security is embedded throughout the entire product lifecycle.
The Opportunity You'll be the technical authority for software security, influencing decisions from initial concept and design through to development, testing, release and ongoing maintenance.

Working across multiple product teams, you'll turn security objectives into practical engineering solutions, helping teams build secure, resilient products without slowing delivery.

What You'll Be Doing
Owning the software security strategy and roadmap across the product line
Defining security architecture, standards and best practices
Embedding threat modelling and security requirements into product development
Working closely with software and product teams to drive secure-by-design principles
Leading architecture reviews and security decision-making on major projects
Driving vulnerability management, remediation and security assurance activities
Improving CI/CD security and development tooling
Defining release security criteria and supporting product assurance
Supporting compliance with emerging regulations including the EU Cyber Resilience Act
Coaching and influencing teams to raise security maturity across the organisationWhat We're Looking For You'll likely bring experience in:

Security Architecture
Product Security
Secure Software Development Lifecycle (SDLC)
Threat Modelling
Vulnerability Management
Security Testing & Assurance
Secure CI/CD Pipelines
Risk Assessment & Security Governance
Software Architecture and Engineering LeadershipDesirable Experience
Embedded Systems
Connected Devices / IoT
Android Architecture
Embedded Linux
Mission-Critical Systems
Product Security Standards and Regulatory Frameworks