Security Architect

As Flo’s Security Architect, you shape secure architectures for a privacy‑first, AI‑powered health platform trusted by millions. You partner with engineering, product and platform teams to embed security into the SDLC, set standards, and drive risk‑based decisions. You’ll lead threat modelling, design reviews and guardrails for human and AI‑agent development, delivering secure patterns that scale. This role offers ownership to build the first secure foundations and guide secure tool adoption across the company.

• Competitive salary
• Performance incentive scheme
• Paid holiday and sick leave
• Parental leave and pay
• Hybrid work model
• 5‑week sabbatical at 5‑year anniversary

• Shape secure architecture from day one with design‑level security reviews
• Build security harnesses for human and AI‑agent development including guardrails and policy‑as‑code
• Lead on AI and agentic security, defining secure patterns for LLM integrations and tool use
• Publish reusable patterns, reference architectures and standards
• Scale threat modelling capabilities and enable engineers to run assessments
• Automate vulnerability triage and root‑cause analysis to feed improvements back into patterns
• Explain security risk in business terms and support risk‑based prioritisation
• Advise and enable engineering, product and leadership, supporting third‑party and AI tool evaluations for secure adoption
• Support ISO 27001/27701 controls integration into engineering processes

• 7+ years in security engineering, application security or security architecture with hands‑on cloud experience
• Deep knowledge of Secure SDLC including threat modelling, security testing, app security reviews and CI/CD security
• Hands‑on experience with AWS and Cloudflare and Terraform or similar IaC
• Strong understanding of OWASP Top 10 and impact assessment
• Solid coding skills (Python, Go, Scala) and experience building security tooling
• Understanding of risks in AI‑assisted and agentic development and LLM applications (OWASP Top 10 for LLMs)
• Experience with security risk analysis and risk management methods
• Ability to explain trade‑offs clearly to engineers and stakeholders and win alignment

• Clear communication of technical risk to non‑technical stakeholders
• Collaborative and influential mindset
• Ability to coach engineers and lead cross‑functional work
• Secure SDLC
• Threat modelling
• CI/CD security