Job
Core
Senior Application Security Architect defining secure-by-design patterns, standards, and threat modelling for web/mobile trading platforms and APIs in a regulated environment.
Role type
Senior IC Application Security Architect
Builds
Secure web/mobile trading platforms, public/partner APIs, and backend services
Domain
Fintech / Regulated Trading / Cloud Security
Required skills
Application security architecture, Threat modelling, Secure SDLC strategy, DevSecOps tooling (SAST/DAST/IAST/SCA), Cloud-native security (AWS), Distributed systems security (Microservices, OAuth2/OIDC, Kubernetes), API security, Secrets management, Policy-as-code
Preferred skills
Fintech/Trading experience, Regulatory compliance (FCA, CySEC, GDPR, PCI DSS), AI security, Security Champions programme, Offensive security certifications
Technologies
AWS, Docker, Kubernetes, SAST, DAST, IAST, SCA, OAuth2, OIDC, GraphQL, REST, SBOM
Responsibilities
Define secure-by-default reference architectures for web/mobile/APIs; Lead threat modelling and design reviews for high-impact initiatives; Oversee AppSec processes and tooling strategy; Embed security controls in CI/CD via policy-as-code; Guide secure integration of acquired technology; Influence engineering teams to adopt security standards without direct authority.
Seniority
Senior, hands-on IC with strategic influence
