Security Architect

As Principal Security Architect, you will shape and embed strong security across our AWS and GCP estate, translating business needs into practical architectural decisions. You’ll partner with engineering and security leadership to improve the security posture and guide teams from design through delivery. You’ll lead threat modelling, enforce secure development, and protect customer data and payments. This role offers hands-on influence in a fast-moving travel tech company with global scale.

• 25 days holiday
• birthday off
• Learnerbly platform access
• Enhanced parental leave
• Employee Assistance Programme
• Gym discount

• Protect customer accounts, bookings and payments by securing services and supplier connections
• Lead security design decisions, document choices and provide actionable guidance
• Translate business needs into security work and align engineering priorities
• Improve cloud and identity security across AWS and GCP with the Cloud team
• Create reusable security designs, infrastructure modules and automated checks
• Lead threat modelling and track actions to closure
• Protect sensitive data with appropriate controls for access, encryption and retention
• Support detection and incident response with logging and incident capabilities
• Advise the Workplace team on security for employee access and devices

• Strong security design experience in cloud environments (AWS/GCP)
• Hands-on engineering ability to review code, test designs and implement changes
• Experience with security architecture decisions and deployment
• Identity and application security knowledge (auth, authorization, API security, OAuth 2.0/OIDC)
• Security in development and deployment (Terraform or similar)
• Threat modelling experience and risk prioritisation
• Familiarity with data protection controls (access, encryption, retention)
• Incident response support and collaboration with SecOps/Infrastructure

• Collaborative and communicative
• Ability to explain complex security concepts to non-technical stakeholders
• Proactive and outcomes-focused
• Cloud security (AWS, GCP) and Kubernetes security
• Hands-on engineering with languages (C#, TypeScript, Python, Ruby, Rust)
• Security architecture and design decisions