Lloyds Banking Group
Senior Product Security Architect
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
JOB TITLE: Senior Product Security Architect
SALARY: £92,702-£119,966
LOCATION(S): Leeds, Bristol, Manchester, Edinburgh
HOURS: Full-time
WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites
About this opportunity
We're looking for a technically deep and forward-thinking Senior Product Security Architect to join our Enterprise Security Architecture team. This is a role that combines application security engineering, vulnerability management and developer engagement into a unified product security capability.
You will work alongside engineering, platform teams and product owners to ensure security is built in from the beginning, as well as own how we find, prioritise and drive the remediation of risk across the application estate and be security's primary voice inside engineering.
The Chief Security Office (CSO) is a vital part of delivering the Group's vision of putting customers at the heart of everything we do, helping Britain prosper and protecting the Group and customers from security threats.
We define and communicate the Group's security strategy and provide critical enterprise security services that both protect the organisation and enable its digital transformation agenda.
We are evolving rapidly by investing in our people, tools and practices to stay ahead of an increasingly complex threat landscape and a fast-paced technology estate. The security architecture function sits at the core of this to provide thought leadership and cross-cutting influence that keep the Group's security posture aligned to its ambitions.
What you'll be doing:
- Defining and being responsible for the target states for application security and vulnerability management and solving sophisticated architectural problems
- Acting as a trusted security partner to engineering - proficient in their language and focused on unblocking rather than gatekeeping
- Performing research and development in collaboration with other security teams to ensure the security architecture is staying ahead of challenges and the Group's technology transformation agenda
- Describing and helping to lead the complexity of the Group's Enterprise Security Architecture and associated interlocks
- Supporting strategic change within the Group, specifically security change where you'll take a leading architectural role in shaping and supervising initiatives
- Staying ahead of emerging product security challenges - including AI-integrated application risk, software supply chain security and cloud-native attack surfaces
- Representing the security architecture function with confidence in senior stakeholder forums
- Producing your own artefacts and handling your own delivery dates; ensuring they integrate into the wider bank reference architecture and Group Security Architecture
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Why join us?
From building a truly sustainable business to crafting a place where people love to work, we need colleagues who are up for the challenge and can match our pace. People who love to push boundaries, make change happen and challenge the status quo. Sound like you?
What we're looking for:
- Deep hands-on experience with application security capabilities and tooling and the ability to integrate them within modern CICD pipelines
- Solid understanding of secure software development practices across the full SDLC, including agile and DevSecOps delivery models
- Experience owning or significantly contributing to a vulnerability management programme at scale - including prioritisation methodology, metrics design and executive reporting
- Proven ability to build trusted relationships with engineering and product teams - you are someone that engineering and developers want in the room, not someone they feel audited by
- Experience with cloud-native application architectures - containers, microservices, serverless - and the security considerations specific to these environments
- Familiarity with AI-integrated application risk - understanding the security implications of LLM integration, RAG architectures and AI-assisted development tooling
- Strong written and verbal communication skills - able to translate technical risk into business language and vice versa
Get help with your application
Your very own career expert that helps elevate your application to the next level.
We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.
This is a place for you
Our ambition is to be the leading UK business for diversity, equity and inclusion supporting our customers, colleagues and communities, and we're committed to creating an environment in which everyone can thrive, learn and develop.
We also offer a wide-ranging benefits package, which includes:
- A generous pension contribution of up to 15%
- An annual performance-related bonus
- Share schemes including free shares
- Benefits you can adapt to your lifestyle, such as discounted shopping
- 30 days' holiday, with bank holidays on top
- A range of wellbeing initiatives and generous parental leave policies
Ready to do the best work of your career? Apply today.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills