{bc}
Apply
workable

Security Architect

Pepperstone
Melbourne, AUS
Full-time
Onsite
Discovered 1 months ago
Application security architectureWeb, mobile, and API securityCloud-native architectureSecure-by-design principlesThreat modellingSTRIDE

Full Job Posting

The Role

Pepperstone is seeking a Security Architect to shape its growing security capability and turn complex business challenges into pragmatic, value-driven solutions.

The role owns security design for applications, APIs, and supporting platforms within the Application Security team.

The Security Architect will help shape secure design patterns for Pepperstone Crypto and act as the senior technical authority for application security architecture.

Key Responsibilities

  • Lead application security architecture vision and strategy across web, mobile, API, and cloud-hosted platforms.
  • Embed secure-by-design principles into products, features, and technology initiatives.
  • Drive security architecture reviews and threat modelling to identify risks early.
  • Develop security patterns, frameworks, and architectural guardrails for secure development at scale.
  • Guide security for wallet, custody, exchange connectivity, and blockchain integrations.
  • Evaluate emerging security technologies and tooling.
  • Collaborate with Cloud, Infrastructure, Risk, and Compliance teams on security and regulatory expectations.
  • Represent security architecture in technology strategy and governance forums.

About You

  • Experienced Security Architect or senior security professional with a record of designing secure, scalable solutions in complex environments.
  • Strong application security expertise across web, mobile, APIs, and cloud-native architectures.
  • Deep understanding of security threats, secure development practices, and threat modelling methods such as STRIDE, PASTA, or MITRE ATT&CK.
  • Comfort working across AWS, Azure, or hybrid cloud environments.
  • Ability to balance risk, innovation, and customer experience with engineering, product, and business stakeholders.
  • Experience in regulated environments and familiarity with DORA, PCI-DSS, ISO, or SOC frameworks.
  • Excellent communicator who can translate complex technical concepts into clear guidance.
  • Software engineering or application development background and security certifications are highly regarded.

Workplace

  • The position is based in Melbourne and uses a hybrid working model.
  • Employees may work remotely from anywhere for up to four weeks per year in addition to standard hybrid working.

Why Pepperstone

  • Pepperstone offers a collaborative culture, flexible working, and ongoing personal development opportunities.
  • Benefits include paid parental leave, volunteering days, workplace giving, events, and office facilities in Melbourne.

About Pepperstone

Pepperstone is a regulated online Forex and CFD trading platform operating globally with the scale of a fintech and the agility of a start-up.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Pepperstone

Delivery Lead - Data

Melbourne, AUS

Discovered 3 weeks agoFull-time

Salesforce Delivery Lead

Melbourne, AUS

Discovered 3 weeks agoFull-time

Delivery Lead - Data

Melbourne, AUS

Discovered 1 months agoFull-time

Security Forensics Engineer

Melbourne, AUS

Discovered 1 months ago

Security Forensics Engineer

Melbourne, AUS

Discovered 1 months agoFull-time