Security Architect
Define, own, and evolve the target-state security architecture for applications, APIs, and cloud platforms. Embed security-by-design principles into product development lifecycles and architectural standards. Lead threat modeling activities for key products and platforms. Act as a company-wide authority on application and cloud security architecture. Develop and maintain security architecture standards, guidelines, reference architectures, and patterns. Advise engineering leadership, product owners, and management on security risks and trade-offs. Collaborate with Legal, Compliance, and Risk teams to align security decisions with business priorities.
- Define, own, and evolve the target-state security architecture for applications, APIs, and cloud platforms.
- Embed security-by-design principles into product development lifecycles and architectural standards.
- Lead threat modeling activities for key products and platforms.
- Act as a company-wide authority on application and cloud security architecture.
- Develop and maintain security architecture standards, guidelines, reference architectures, and patterns.
- Advise engineering leadership, product owners, and management on security risks and trade-offs.
- Collaborate with Legal, Compliance, and Risk teams to align security decisions with business priorities.
- 7+ years of experience in Application Security, Security Architecture, or Product / Platform Security roles.
- Hands-on experience designing security architectures for complex, distributed systems.
- Strong understanding of secure SDLC, security-by-design principles, and architectural security patterns.
- Proven experience leading threat modeling and architectural security reviews for critical systems.
- Deep expertise in: Application & API Security, Cloud Security (AWS preferred), Identity & Access Management (IAM).
- Solid understanding of modern architectures: microservices, event-driven systems, Kubernetes.
- Ability to make sound security architecture decisions under uncertainty and business constraints.
- Experience collaborating with senior engineers, architects, and engineering leadership.
- Experience working in regulated or security-sensitive industries.
- Practical experience implementing Zero Trust and Defense-in-Depth models.
- Experience with security governance across multiple products and teams.
- Experience building reusable security patterns and reference architectures.
- Strong communication skills with the ability to explain complex security concepts to non-technical stakeholders.
- Strategic and architectural thinking.
- Ability to influence without direct authority.
- Confident decision-making and accountability.
- High level of ownership and proactivity.
- Paid vacations, sick leave, personal events days, days off
- Corporate healthcare program for your well-being
- Referral program - enjoy cooperation with your colleagues and get the bonus
- Educational support by our L&D team: internal and external trainings and conferences, courses on Udemy
- Free internal English courses
- Sport benefit
- Multiple internal activities: online platform with newsletters, quests, gamification, and presents for collecting bonuses, RedCore talks club for movie and book lovers, board games cozy evenings, special office days dedicated to holidays, etc
- Company events, team buildings
PIN-UP Global is an international holding company that develops technologies, B2B solutions and products for the iGaming industry. Headquartered in Warsaw, the group brings together businesses spanning product development, technology and marketing services for online gaming. It supports a portfolio of companies and brands operating across multiple markets. PIN-UP Global focuses on building advanced technology and products for the gambling sector.