Security Architect

About Pepperstone

Founded in 2010, Pepperstone is a pioneering global fintech dedicated to redefining how markets are traded. We are a diverse, agile, and globally connected team of over 700 members spread across 12 locations and 9 time zones. Our culture champions curiosity, inclusivity, collaboration, and continual growth, fostering an environment where professional development and work-life balance are prioritized. We embrace agile methodologies that empower individuals to focus on impactful outcomes and value fresh ideas and challenges.

Role Overview

We are seeking a Security Architect to join our Security team and significantly influence the development of our expanding security capabilities. This role involves transforming complex business issues into practical, high-value security architectures. You will be accountable for the security design of Pepperstone’s applications, APIs, and supporting technology platforms, ensuring security is built-in from the outset rather than retrofitted.

As a vital member of the Application Security team, you will translate organizational risk tolerance into actionable architectural design patterns for engineering teams. This role also includes leading security architecture activities for Pepperstone’s crypto initiatives, shaping secure designs for digital asset products amidst the dynamic regulatory landscape. Collaborating closely with engineers, product managers, and senior stakeholders, you will promote secure-by-design principles across our suite of products.

Key Responsibilities

• Develop and lead the strategy for application security architecture across web, mobile, API, and cloud environments.
• Collaborate with engineering and product teams to integrate secure-by-design concepts into new products, features, and technical endeavors.
• Conduct security architecture reviews and threat modeling to identify risks early and propose practical mitigations.
• Create security frameworks, patterns, and architectural guardrails to enable scalable secure development.
• Provide expert guidance on security aspects within our Crypto ecosystem, including wallets, custody platforms, exchange connections, and blockchain integrations.
• Assess emerging security tools and technologies to enhance application security capabilities continuously.
• Work closely with Cloud, Infrastructure, Risk, and Compliance teams to ensure solutions align with security requirements and regulatory standards.
• Champion secure technical decisions and represent security architecture in technology governance and strategy discussions.

Qualifications and Experience

• Proven experience as a Security Architect or senior security professional, designing secure and scalable solutions in complex technical environments.
• Deep application security expertise across web, mobile, APIs, and cloud-native architectures; experience securing cryptocurrency, blockchain, or digital asset platforms is a strong advantage.
• Thorough knowledge of modern security threats, secure development best practices, and threat modeling techniques such as STRIDE, PASTA, or MITRE ATT&CK.
• Experience working with AWS, Azure, or hybrid cloud environments, including embedding security considerations into product development from inception.
• Strong collaboration skills working alongside engineers, product teams, and business stakeholders to balance security risk, innovation, and user experience.
• Experience operating in regulated environments and familiarity with compliance frameworks like DORA, PCI-DSS, ISO, and SOC.
• Excellent communication skills, capable of explaining complex technical concepts clearly and influencing decisions at all organizational levels.
• A background in software engineering or application development is beneficial, as are security certifications such as CISSP, CSSLP, OSCP, CCSP, or AWS/Azure Security credentials.
• A passion for continuous learning, staying abreast of emerging threats, and contributing to a dynamic, high-performing team culture.

Employee Benefits and Work Culture

• Competitive pay package with company bonus opportunities.
• A truly collaborative and welcoming work environment.
• Flexible and hybrid working model with remote work options including up to four weeks remote location work per year.
• Commitment to ongoing personal and professional development and learning.
• Generous parental leave benefits: 15 weeks paid leave for primary carers and 4 weeks paid leave for secondary carers.
• Three paid volunteer days annually and participation in our Workplace Giving Program.
• Frequent social events, including weekly gatherings fostering team spirit.
• State-of-the-art office facilities at Collins Square, Melbourne, featuring premium end-of-trip amenities like bicycle parking, change rooms, and showers.
• Fully stocked kitchens with locally sourced coffee and specialty teas for a quality workplace experience.

Additional Information

Pepperstone operates as a regulated online Forex and CFD trading platform, combining global fintech capabilities with startup agility. We value team members' honest feedback and ensure transparent recruitment processes. We are committed to equal opportunity hiring and highly encourage applications from diverse backgrounds. We manage applications continuously to fill this role promptly.

Recruitment Note: Pepperstone prefers direct applications over agency submissions for this opportunity.