{bc}
indeed

Principal Security Architect — DevSecOps (Group Manager II - Information Security)

UST
London, GBR
Executive
Onsite
Discovered 1 months ago
DevSecOpsSecurity architectureCloud-native securityCI/CD pipelinesKubernetesContainer security

Full Job Posting

Role overview

UST FinX is seeking a Principal Security Architect — DevSecOps.

This is a senior, hands-on technical leadership role focused on embedding security into the engineering lifecycle.

The role is not policy-only, audit-only, advisory, or traditional people management.

Core responsibilities

  • Define and evolve DevSecOps strategy for a cloud-native banking transformation platform.
  • Embed security across design, coding, build, test, deployment, runtime, monitoring, and incident response.
  • Automate security controls across CI/CD, infrastructure provisioning, application delivery, containers, Kubernetes, and cloud services.
  • Operationalize SAST, DAST, SCA, container scanning, secrets scanning, and policy-as-code.
  • Define secure engineering standards and reusable developer guardrails.
  • Apply IAM, network segmentation, workload identity, secrets management, least privilege, zero trust, runtime security, and auditability.
  • Guide security architecture for APIs, microservices, event-driven systems, SaaS integrations, and developer tooling.
  • Partner with platform, backend, DevOps, QA, product, and delivery teams.
  • Mentor engineers through design reviews, threat modeling, code reviews, pipeline reviews, and pairing.
  • Ensure production systems are secure, observable, resilient, compliant, and ready for regulated banking.

Required background

  • Strong software engineering background and experience securing production cloud-native platforms.
  • Hands-on ability to design secure patterns, automate controls, build guardrails, and write production-grade code and configuration.
  • Ability to balance security, delivery speed, developer experience, and operational resilience.
  • Ability to evaluate AI-assisted engineering outputs and ensure controls are automated, observable, repeatable, and embedded.

Company context

UST FinX develops technology intended to address legacy platform constraints in the banking industry.

The role reports directly to the CTO of UST FinX and provides technical influence across multiple engineering pods.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at UST