Software Security Architect

Location: Cambridge (Waterbeach)

Salary: Up to £95,000 + flexibility for exceptional candidates

Job Type: Permanent

Are you an experienced Software Security Architect looking for an opportunity to take full ownership of security strategy within an established technology business?

The ONE Group are working with an innovative technology company based in Cambridge, who are looking to appoint a Software Security Architect to lead the development and implementation of their product security strategy.

This is a fantastic opportunity for someone who enjoys combining technical expertise with strategic leadership, taking responsibility for establishing security processes, identifying vulnerabilities and driving improvements across a diverse portfolio of products.

Rather than joining an established security function, you’ll have the autonomy to shape how security is approached across the business, working closely with engineering teams and senior leadership to ensure security is embedded throughout the entire product development lifecycle.

The Role

As Software Security Architect, you’ll take ownership of product security across a complex technology environment, spanning embedded devices, Android platforms, Windows applications and cloud-based solutions.

Your responsibilities will include:

• Developing and implementing a comprehensive software and product security strategy.

• Establishing security standards, governance frameworks and secure development processes.

• Identifying vulnerabilities, potential attack surfaces and security risks across hardware and software ecosystems.

• Leading threat modelling, security architecture reviews and security-by-design initiatives.

• Driving preparations for compliance with the EU Cyber Resilience Act (CRA).

• Improving vulnerability management, incident response and security assurance processes.

• Working closely with engineering teams to embed security throughout the development lifecycle.

• Assessing existing security capabilities, identifying skills gaps and recommending improvements.

• Presenting security recommendations, risks and investment requirements to senior stakeholders.

• Potentially building and leading a dedicated security engineering team as the function develops.

What We’re Looking For

We’re particularly interested in speaking with individuals who can demonstrate a combination of strong technical security knowledge, strategic thinking and genuine ownership of security initiatives.

Essential experience:

• Significant experience in software security architecture, product security or a closely related discipline.

• Proven ability to develop and implement security strategies, processes and frameworks.

• Strong understanding of threat modelling, vulnerability management and secure software development practices.

• Experience taking ownership of security improvements, from identifying risks through to implementing solutions.

• Ability to influence engineering teams and senior stakeholders, communicating technical security risks in a commercially meaningful way.

• Confidence operating independently, making strategic decisions and driving security initiatives across a business.

Desirable experience:

• Background in telecommunications, defence electronics, mobile technology, embedded systems or IoT.

• Knowledge of Android platform security, embedded Linux or connected-device security.

• Experience securing products incorporating hardware, software and cloud-based technologies.

• Familiarity with security regulations, assurance frameworks or product conformity assessments.

• Previous experience establishing or developing a security function.

Experience with the EU Cyber Resilience Act would be beneficial but is not essential. Candidates with experience implementing comparable security frameworks and regulations are equally encouraged to apply.

What’s on Offer?

• Salary up to £95,000, with some flexibility for exceptional individuals.

• Opportunity to take complete ownership of product security within an established technology business.

• Significant autonomy to develop and implement security strategy.

• Exposure to cutting-edge communications technology, including Android-based and mission-critical products.

• Direct engagement with senior leadership and the opportunity to influence business-wide decisions.

• Potential to establish and manage a dedicated security engineering team.

• Long-term career progression within a business investing in its security capabilities.

This is an excellent opportunity for a technically credible security professional who wants to move beyond simply advising on security challenges and take genuine ownership of implementing solutions.

Due to the nature of the products and customers involved, the successful candidate may be required to undergo UK Security Clearance vetting.