Application Security Architect

What’s in it for you

Benefits

We’re all about the little helps. That’s why we give our wonderful colleagues bags of benefits. Including wellbeing services, an award-winning pension scheme and much, much more, our colleague reward package keeps on giving. And helps make every day a little better for you and your family. These include but are not limited to:

• Annual bonus scheme of up to 20% of base salary
• Holiday starting at 25 days plus a personal day (plus Bank holidays)
• Buy holiday salary sacrifice scheme (for salaried roles)
• Private medical insurance
• Retirement savings plan - save between 4% and 7.5% and Tesco will match your contribution
• Life Assurance - 5 x contractual pay
• 26 weeks maternity and adoption leave (after 1 years’ service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 4 weeks fully paid paternity leave
• The right to request flexible working from your first day with us
• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing
• A Colleague Clubcard for you & a family member (after 3 months of service), giving you access to lots of discounts in-store & online
• Great colleague deals and discounts, saving you money on everyday purchases, eating out and utility bills for the home
• Access to our colleague networks providing a space for colleagues to come together from a range of backgrounds. For more information about our colleague networks please click here
• Opportunities to get on - take advantage of our ongoing learning opportunities and award-winning training, to help you achieve the job and career you want
  
  

Click Here to read more about the full range of benefits we have available for our colleagues

About The Role

We are committed to align with the digital advancements at Tesco and secure the new technologies that enable our business to have a superior focus on serving our customers, communities, and planet.

Application Security Solution Architecture team within the larger cyber security group at Tesco Technology has been established to define the security architecture patterns covering cloud-native services, deliver the security design artefacts, develop the security architecture standards and lead the adoption of the architectural patterns into development projects across all directorates.

Highly competent, committed, and passionate architect will strengthen the Application Security Architecture team, as we build the defensible application security architectures to protect our customers, partners, and colleagues.

You will be responsible for

• Engage in Security Architecture and Design, including Threat Modelling, for strategic platforms and systems with modern software architectures and advanced tech stacks.
• Drive security architecture decisions and guide security implementation for critical strategic systems.
• Lead the adoption of Security and Privacy by-Design principles with architects and development teams.
• Develop application security architecture patterns covering cloud-native services, security design artifacts, and architecture standards in alignment with Tesco's cyber security strategy, industry standards, and regulatory requirements.
• Perform threat models for strategic application systems, identify security design flaws and technology weaknesses, and define security design requirements to address cyber threats.
• Influence decision makers to improve application architecture patterns and strengthen security.
• Develop security standards for both front-end and back-end technologies and provide guidance on secure application and web service development.
  
  

You will need

• Experience in developing application security architecture patterns and design principles.
• Proficiency in Apps/API solution-level threat modeling and deep-dive technical security assessments.
• Experience with Kubernetes, Docker containers, and preferably GitHub Actions (or other CICD frameworks).
• Knowledge of application security frameworks and securing front-end and back-end technologies.
• A strong understanding of inherent application design flaws and gaps in different architectures.
• Experience with modern SDLC methodologies and technologies.
• Familiarity with application attack tactics and techniques (MITRE Framework), security maturity models (OpenSAMM, BSIMM), security frameworks (NIST CSF), security standards (OWASP, SANS Top 25), and regulations (GDPR, PA-DSS).