Experis UK
Cyber Security Product Architect
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Product Security Architect
Hybrid – London | 2-Month Initial Contract | Outside IR35
Day Rate: Competitive
Start Date: August 2026
We're looking for a Senior Product Security Architect to join an initial two-month engagement, bringing cyber security architecture and product security expertise to a mix of client and internal work. This is a hands-on, secure-by-design role spanning embedded, connected, cloud and software products, not tied to any single sector or regulatory framework. If you thrive on threat modelling, secure architecture and translating standards into practical controls, this one's for you.
What you'll be doing:
- Designing, reviewing and documenting secure product, system, application, cloud and infrastructure architectures, advising on IAM, authentication, cryptography, key management, network security, logging, monitoring and data protection.
- Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO/SAE 21434, from item definition through to attack feasibility rating and risk treatment.
- Defining and embedding security requirements across the secure development lifecycle, covering firmware, embedded systems, cloud services, APIs, CI/CD and software supply-chain security.
- Improving vulnerability intake, triage, remediation and reporting, plus SBOM/dependency visibility and product security incident readiness.
- Communicating complex risks to technical and non-technical stakeholders and producing assurance-grade documentation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we need from you:
- Senior product security or security architecture experience across embedded, connected and cloud products.
- Demonstrable experience leading or executing TARAs to ISO/SAE 21434.
- The ability to derive and integrate security requirements into a secure development lifecycle.
- Strong written communication and assurance-grade documentation skills.
- Familiarity with Threat Guard (the client's TARA tooling), or the ability to get up to speed quickly.
- Working knowledge of standards such as ISO/IEC 27001, NIST, OWASP, IEC 62443, ISO/SAE 21434, UNECE R155 & R156, TISAX, Cyber Essentials and the EU Cyber Resilience Act.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Nice to have:
- Delivery experience against the EU Cyber Resilience Act.
- Automotive, off-highway or connected-vehicle domain experience.
- Relevant certifications (e.g. CISSP, or an ISO/SAE 21434 / product security qualification).
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location