AWS Principal Architect in Midlothian, Scotland

We are looking for a Principal Threat Modeling Architect. You will be responsible for leading the enterprise Threat Modeling program, establishing threat modeling standards, methodologies, and governance, and building a high-performing team of threat modeling professionals. You will partner with application development, cloud engineering, cybersecurity, and business stakeholders to proactively identify and mitigate security risks across the software development lifecycle, cloud environments, and emerging technology initiatives.

The team you will be joining is part of the Security Architecture organization, a function that is critical to the firm's ability to design and deliver secure technology solutions. As cyber threats continue to evolve, threat modeling serves as a foundational security practice that enables the organization to identify architectural weaknesses early, reduce risk, strengthen security-by-design practices, and improve the resilience of applications, cloud platforms, and critical business services.

As a Principal Threat Modeling Architect, you will:

• Partner with Security Architecture, Application Security, Cloud Security, Engineering, and Development teams to embed threat modeling throughout the software development lifecycle.
• Conduct and oversee threat modeling exercises for critical business applications, cloud-native services, AI solutions, and strategic transformation initiatives.
• Define actionable risk mitigation strategies and architectural recommendations to address identified threats and security weaknesses.
• Establish security architecture patterns, guidance, and best practices related to application security, cloud security, and secure-by-design principles.

These skills will help you succeed in this role:

• Deep expertise in threat modeling methodologies such as STRIDE, MITRE ATT&CK, Kill Chain, attack trees, and risk-based security analysis.
• Strong application security and cloud security experience, including modern cloud-native architectures, APIs, containers, microservices, and DevSecOps practices.
• Proven leadership experience building, mentoring, and leading highly skilled technical teams.
• Ability to translate complex technical risks into practical, business-aligned security recommendations.
• Proven ability to successfully drive and develop teams that work remotely and across multiple geographic time zones.

Education & Preferred Qualifications:

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• 13 years or more of experience leading large-scale application security, cloud security, threat modeling, security architecture, or cybersecurity transformation initiatives in complex, global environments, with at least 8 years of cybersecurity leadership experience preferred.
• Demonstrated experience leading enterprise threat modeling, application security, or secure architecture programs.
• Deep understanding of secure software development, application security testing, cloud security architecture, and secure design principles.
• Experience securing cloud platforms such as AWS, Azure, and Google Cloud.
• Knowledge of software development frameworks, APIs, microservices, containers, Kubernetes, CI/CD pipelines, and DevSecOps practices.
• Professional certifications such as CISSP, CCSP, CSSLP, AWS Security, Azure Security, SABSA, TOGAF, or equivalent security certifications are highly desirable.
• Experience within financial services or other highly regulated industries is preferred.

Additional Requirements:

• Experience driving security transformation initiatives across large, complex global organizations.
• Ability to effectively collaborate with development, engineering, architecture, risk, and business teams.
• Limited travel may be required based on business needs.

Work Requirement: Hybrid: Expected to work in accordance with State Street's hybrid work model. Shift: Standard business hours with flexibility to support global stakeholders across multiple time zones.

About State Street: Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Full time