Security Architect
Flo Health10 hours ago
London, United KingdomSenior
Responsibilities
- Lead security architecture and design reviews for new services and major changes.
- Create secure patterns, reference architectures, standards, and reusable paved roads.
- Build guardrails, sandboxing, least-privilege access, secrets handling, policy-as-code, and automated security checks for developer and AI-agent workflows.
- Define secure patterns for LLM integrations, MCP servers, and tool use, addressing prompt injection, data leakage, excessive agency, and supply-chain compromise.
- Scale threat modeling by building tools and enabling engineers to perform threat models independently.
- Automate vulnerability triage and investigation, identify systemic causes, and feed fixes into security patterns and guardrails.
- Translate security risk and trade-offs into clear decisions for engineering, product, leadership, and the business.
- Coach engineers, evaluate third-party and AI tools, and support ISO 27001 and ISO 27701 controls.
Requirements
- At least 7 years of experience in security engineering, application or product security, or security architecture.
- Hands-on experience securing cloud-native systems.
- Deep knowledge of secure SDLC practices, threat modeling, security testing, application security reviews, and CI/CD security.
- Hands-on experience with AWS and Cloudflare or equivalents, plus Terraform or similar infrastructure-as-code tools.
- Strong knowledge of the OWASP Top 10 and exploitability and impact assessment.
- Solid coding skills in languages such as Python, Go, or Scala, with experience building security tooling or automation.
- Practical understanding of AI-assisted and agentic development risks and LLM applications, such as the OWASP Top 10 for LLMs.
- Experience with security risk analysis and risk management methods.
- Experience building guardrails, sandboxes, or policy-as-code for developer platforms or AI coding agents is preferred.
- iOS or Android security experience, ISO 27001, ISO 27701, or SOC 2 audit experience, and experience in regulated privacy-sensitive industries are preferred.
- Certifications or degrees such as CISSP, CCSP, OSCP, or an MSc in Information Security are preferred.
Benefits
- Annual salary of £100,000—£130,000 GBP, with annual reviews and participation in a performance incentive scheme.
- Paid holiday, sick leave, female health leave, and enhanced parental leave and pay.
- Learning support and accelerated professional growth opportunities.
- Hybrid work with three days per week in the office.
- A five-week fully paid sabbatical at the five-year Floversary.
- Flo Premium for friends and family, plus health, pension, and wellbeing perks.
About Flo Health
Flo Health builds a mobile app for menstrual cycle, ovulation, fertility, and pregnancy tracking, offering AI-powered insights and a private community on iOS and Android. The company operates a freemium model with optional premium subscriptions and health content. Founded in 2015 and headquartered in London, this privately held firm reports tens of millions of monthly active users, and its privacy-focused Anonymous Mode was named one of Time’s Best Inventions of 2023.