Senior Product Security Architect

Cloud Product Security Architect - 12 month daily rate contract

We are seeking a hands-on Cloud Product Security Architect to join a high-performing security team within a financial services environment.

This role will act as a lead security engineer, working closely with product and engineering teams to safeguard banking applications (web, mobile, and client platforms) and reduce technical security risk across cloud and distributed environments.

You will play a key role in embedding security by design across products and platforms, conducting in-depth security assessments, and ensuring robust security controls are integrated throughout the development lifecycle.

• Conduct hands-on security assessments across applications, platforms, and systems using threat modelling and architecture reviews
• Identify risks such as design flaws, cloud misconfigurations, insecure dependencies, and API vulnerabilities
• Design and implement embedded security controls, including identity & access management, encryption, network security, and runtime protections
• Work within agile / DevSecOps environments, embedding security into CI/CD pipelines and development processes
• Drive shift-left security practices, including automated testing (SAST, SCA, DAST) and compliance checks
• Lead the implementation and management of Cloud Security Posture Management (CSPM) tools
• Collaborate closely with engineering teams and senior stakeholders to ensure secure delivery of products
• 6–8+ years’ experience in cloud and product security, ideally within financial services
• Strong experience xcfaprz with application security tools (e.g. Snyk, CodeQL, Veracode, Checkmarx, SonarQube)
• Solid understanding of cloud security architecture (AWS or Azure)
• Experience embedding security within DevSecOps / CI/CD environments
• Strong stakeholder engagement and communication skills
• AWS or Azure security certifications
• Experience working in regulated environments (banking / financial services)
• Strong background in secure application architecture and design