At a Glance
- Tasks: Lead application security and vulnerability management, ensuring security is integrated from the start.
- Company: Join Lloyds Banking Group, a leader in financial services with a commitment to diversity and inclusion.
- Benefits: Enjoy a competitive salary, generous pension, 30 days holiday, and flexible working options.
- Other info: Be part of a dynamic team focused on innovation and professional growth.
- Why this job: Make a real impact on security architecture while shaping the future of financial services.
- Qualifications: Deep experience in application security, cloud-native architectures, and strong communication skills.
The predicted salary is between 92701 - 109060 £ per year.
Salary Range: £92,701 - £109,060
We support flexible working – click here for more information on flexible working options.
Flexible Working Options: Hybrid Working, Job Share
About this opportunity:
We’re looking for a technically deep and forward-thinking Senior Product Security Architect to join our Enterprise Security Architecture team. This is a role that combines application security engineering, vulnerability management and developer engagement into a unified product security capability.
You will work alongside engineering, platform teams and product owners to ensure security is built in from the beginning, as well as own how we find, prioritise and drive the remediation of risk across the application estate and be security’s primary voice inside engineering.
The Chief Security Office (CSO) is a vital part of delivering the Group's vision of putting customers at the heart of everything we do, helping Britain prosper and protecting the Group and customers from security threats. We define and communicate the Group’s security strategy and provide critical enterprise security services that both protect the organisation and enable its digital transformation agenda.
We are evolving rapidly by investing in our people, tools and practices to stay ahead of an increasingly complex threat landscape and a fast-paced technology estate. The security architecture function sits at the core of this to provide thought leadership and cross-cutting influence that keep the Group’s security posture aligned to its ambitions.
What you’ll be doing:
- Defining and being responsible for the target states for application security and vulnerability management and solving sophisticated architectural problems.
- Acting as a trusted security partner to engineering – proficient in their language and focused on unblocking rather than gatekeeping.
- Performing research and development in collaboration with other security teams to ensure the security architecture is staying ahead of challenges and the Group’s technology transformation agenda.
- Describing and helping to lead the complexity of the Group’s Enterprise Security Architecture and associated interlocks.
- Supporting strategic change within the Group, specifically security change where you’ll take a leading architectural role in shaping and supervising initiatives.
- Staying ahead of emerging product security challenges – including AI-integrated application risk, software supply chain security and cloud-native attack surfaces.
- Representing the security architecture function with confidence in senior stakeholder forums.
- Producing your own artefacts and handling your own delivery dates; ensuring they integrate into the wider bank reference architecture and Group Security Architecture.
Why join us?
From building a truly sustainable business to crafting a place where people love to work, we need colleagues who are up for the challenge and can match our pace. People who love to push boundaries, make change happen and challenge the status quo. Sound like you?
What we’re looking for:
- Deep hands-on experience with application security capabilities and tooling and the ability to integrate them within modern CICD pipelines.
- Solid understanding of secure software development practices across the full SDLC, including agile and DevSecOps delivery models.
- Experience owning or significantly contributing to a vulnerability management programme at scale – including prioritisation methodology, metrics design and executive reporting.
- Proven ability to build trusted relationships with engineering and product teams – you are someone that engineering and developers want in the room, not someone they feel audited by.
- Experience with cloud-native application architectures – containers, microservices, serverless – and the security considerations specific to these environments.
- Familiarity with AI-integrated application risk – understanding the security implications of LLM integration, RAG architectures and AI-assisted development tooling.
- Strong written and verbal communication skills – able to translate technical risk into business language and vice versa.
We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.
This is a place for you. Our ambition is to be the leading UK business for diversity, equity and inclusion supporting our customers, colleagues and communities, and we’re committed to creating an environment in which everyone can thrive, learn and develop.
We also offer a wide-ranging benefits package, which includes:
- A generous pension contribution of up to 15%
- An annual performance-related bonus
- Share schemes including free shares
- Benefits you can adapt to your lifestyle, such as discounted shopping
- 30 days’ holiday, with bank holidays on top
- A range of wellbeing initiatives and generous parental leave policies
Ready to do the best work of your career? Apply today.
At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop.
We keep your data safe. So, we'll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We'll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person. We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.
Senior Product Security Architect employer: Lloyds Bank
At Lloyds Banking Group, we pride ourselves on being an exceptional employer, offering a supportive and inclusive work environment in Fort William. With a strong focus on employee growth through our Skill Progression Framework, we provide ample opportunities for career advancement while ensuring a healthy work-life balance with flexible working options. Our comprehensive benefits package, including generous pension contributions and wellbeing initiatives, reflects our commitment to the well-being of our colleagues, making us a great place to build a meaningful career.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Product Security Architect
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Lloyds Bank, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Lloyds Bank
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Lloyds Bank. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Senior Product Security Architect
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Lloyds Bank insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Lloyds Bank that you’re committed to staying ahead in the game.
How to prepare for a job interview at Lloyds Bank
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Lloyds Bank to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Lloyds Bank.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.