Security Architect - 12 month FTC
Core
Provide specialist security architecture for customer-facing and enterprise applications across web, mobile, API, and cloud services, shaping secure designs and embedding security throughout the software development lifecycle.
Role type
Senior IC Security Architect
Builds
Secure web, mobile, and API applications for The National Lottery
Domain
Gaming/Lottery industry + Application Security
Required skills
Application security architecture, Threat modelling (STRIDE), Secure SDLC/DevSecOps, Identity and Access Management, Cloud-native architecture, Application security testing (SAST/DAST/SCA/Pentesting), Web and API security, Mobile security, Data protection
Preferred skills
Regulated environment experience, Container security/Kubernetes, App-store release security, Security certification (CISSP/CSSLP/SABSA/CREST/OSWE), Lottery/Gaming/Payments sector experience
Technologies
Burp Suite, OWASP ZAP, Snyk, SonarQube, HTTP/S, REST, GraphQL, iOS, Android, Kubernetes, CI/CD pipelines
Responsibilities
Produce and maintain security designs and requirements; Lead application threat modelling; Assess web/mobile/API/cloud security; Guide teams on secure design patterns; Advise on security testing strategy; Review security findings and prioritize remediation; Contribute to reusable security standards and reference architectures.
Seniority
Senior, hands-on IC