Product Security Architect

Salary: £75,000 - 110,000 per year

Requirements:

• Strong experience in product security, application security, secure software engineering, security architecture or a similar role in a software-led environment.
• Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery.
• Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation.
• The judgement to assess exploitability and business impact pragmatically.
• Practical experience applying security across the software development lifecycle, including areas such as threat modelling, secure coding, testing, vulnerability management and secure delivery.
• Ability to influence product, development and cross-functional stakeholders without direct authority.
• Strong communication skills, with the ability to turn technical security concerns into clear, actionable decisions.
• Familiarity with recognised frameworks or certifications such as ISO 27001, NIST CSF or similar would be helpful.
• Experience in a product, platform or SaaS business.
• Experience in high-trust, regulated or mission-critical environments would be valuable.

Responsibilities:

• Act as a senior security voice across the product and development teams, ensuring security is properly represented in roadmap, backlog and design decisions.
• Work with colleagues across product, development, and networks & infrastructure to embed security across the product lifecycle.
• Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities.
• Assign pragmatic risk levels and support sensible prioritisation of remediation alongside feature delivery and other technical work.
• Help improve secure software development and delivery practices, including CI/CD and related controls.
• Support vulnerability remediation, including root cause analysis and long-term fixes.
• Contribute to security standards, metrics and ways of working that improve product security maturity over time.
• Provide security leadership and architectural guidance for the secure implementation and operation of SRT products in customer environments, including defining the principles, patterns and guidance that customer-facing and implementation teams should follow.
• Work with internal stakeholders to ensure engineering reality supports the security claims we make to customers, partners and auditors.
• Contribute to wider assurance and certification activity, including ISO 27001 or other relevant standards.

Technologies: CI/CD, Support, PLC, Security, Architect, Network

SRT Marine Systems plc (SRT) is a market leader in international marine surveillance technology and systems, headquartered in the UK with a global customer base. We have a significant impact in the marine domain by leading the next generation of Maritime Domain Awareness technologies that enhance security, safety, and environmental protection. Our work environment is ambitious and rewarding, and we are continually innovating to improve our products and services. We offer a highly competitive salary and benefits package, 25 days of annual leave rising to 28 days with service, and real individual development opportunities. This role is primarily based in our Bristol office with occasional travel to Cardiff and Bath, and we support flexible hybrid working.