Software Security Architect

Overview

In this role you lead software security across the full product line, turning objectives into pragmatic architecture and controls. You collaborate with engineering to embed security from concept through maintenance, shaping secure product development and practice. You will influence a diverse set of teams, drive risk-based decisions, and ensure compliance with security standards and regulatory expectations. This is an opportunity to impact innovative products in a company that values practical, hands-on security leadership.

Responsibilities

• Own product-line software security and define the strategic target state and roadmap
• Ensure consistent security requirements across products, platforms and shared components
• Maintain a product-line view of security risk, debt, dependencies and remediation options
• Define measurable security controls, evidence and acceptance criteria
• Incorporate security requirements and threat modelling into planning and design
• Establish security gates across implementation, code review, build, test, release and maintenance
• Triages vulnerabilities with engineering teams and document exceptions
• Lead secure architecture guidance, patterns and guardrails
• Guide tool selection for security within dev and CI/CD workflows
• Define security evidence for release decisions and coordinate testing and remediation
• Align security architecture and lifecycle processes with EU Cyber Resilience Act (CRA)
• Act as security authority and coach across engineering and product teams
• Connect software security goals with wider product obligations

Key requirements

• Demonstrable experience owning software or product security across multiple teams, products or platforms
• Strong software architecture and engineering background with practical security controls delivery
• Deep understanding of secure development lifecycle, threat modelling, vulnerability management and security testing
• Experience embedding automated security controls and evidence into CI/CD workflows
• Ability to assess technical risk and communicate trade-offs to engineering and business stakeholders
• Credibility to influence senior technical leaders while guiding delivery decisions
• Clear written and verbal communication with a pragmatic delivery focus

• influencing without authority
• pragmatic decision-making
• cross-functional collaboration
• secure design and trust boundaries
• identity, authentication, authorization
• cryptography and data protection

…