Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Security Architect role.
Rezi rewrites your resume against Flo Health's job description. Free.
Tailor your resume to this Security Architect role.
Rezi rewrites your resume against Flo Health's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Security Architect posting at Flo Health — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Security Architect posting at Flo Health — free, in seconds.
About the Role
As our Security Architect, you will ensure millions of people can trust Flo with their personal health data. This hands-on role involves shaping secure architectures and building guardrails for engineering, product, and platform teams, enabling rapid and safe development by both humans and AI coding agents. You will combine security architecture, product and application security engineering, and security risk expertise to set secure patterns, lead threat modeling and design reviews, embed security into the SDLC and CI/CD, and translate security risk into pragmatic decisions.
Responsibilities
- Shape secure architecture from day one by partnering with teams early in design.
- Lead security design reviews for new services and major changes, recording key decisions and risk trade-offs.
- Build security harnesses for human and AI-agent development, designing guardrails, sandboxing, least-privilege access, secrets handling, policy-as-code, and automated checks.
- Define secure patterns for LLM integrations, MCP servers, and tool use, addressing risks like prompt injection and data leakage.
- Publish reusable patterns, reference architectures, and standards to facilitate adoption.
- Scale threat modeling by building tools and skills for engineers and conducting internal security assessments.
- Automate vulnerability triage and investigation to find systemic root causes and feed fixes back into patterns and guardrails.
- Explain security risk in pragmatic terms for business prioritization.
- Act as a trusted partner to engineering, product, and leadership, coaching engineers and evaluating third-party and AI tools for secure adoption.
- Support ISO 27001/27701 by integrating controls into engineering processes.
Requirements
- 7+ years in security engineering, application/product security, or security architecture, including hands-on work securing cloud-native systems.
- Deep knowledge of Secure SDLC: threat modeling, security testing, app security review, and CI/CD security.
- Hands-on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC.
- Strong grasp of the OWASP Top 10 and ability to assess exploitability and impact.
- Solid coding skills (e.g., Python, Go, Scala) and experience building security tooling or automation.
- Practical understanding of risks in AI-assisted and agentic development and LLM applications (e.g., OWASP Top 10 for LLMs).
- Experience with security risk analysis and risk management methods.
- Ability to explain trade-offs clearly to engineers and senior stakeholders and to influence others.
Skills
- Security Architecture
- Product Security
- Application Security Engineering
- Security Risk Expertise
- Threat Modeling
- Design Reviews
- SDLC Security
- CI/CD Security
- Cloud-Native Security
- AWS
- Cloudflare
- Terraform
- Infrastructure as Code (IaC)
- OWASP Top 10
- Python
- Go
- Scala
- Security Tooling
- Automation
- AI Security
- Agentic Development Security
- LLM Security
- Security Risk Analysis
- Risk Management
- Policy-as-Code
- Guardrails
- Sandboxing
- ISO 27001
- ISO 27701
- SOC 2 Audits
- CISSP
- CCSP
- OSCP
Location
- Hybrid
Work Type
- Hybrid
- Full-time
Experience Level
- 7+ years
Education Level
- MSc in Information Security (preferred)
- CISSP (preferred)
- CCSP (preferred)
- OSCP (preferred)
Salary/Compensations
- £100,000—£130,000 GBP
Benefits
- Competitive salary and annual reviews
- Opportunity to participate in Flo’s performance incentive scheme
- Paid holiday, sick leave, and female health leave
- Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents
- Accelerated professional growth through world-changing work and learning support
- In-person collaboration and work in a hybrid model
- 5-week fully paid sabbatical at 5-year Floversary
- Flo Premium for friends & family
- Health perks
- Pension perks
- Wellbeing perks
About the Company
- Flo is the world’s #1 health & fitness app worldwide with over 500M+ downloads and 80M+ monthly users, on a mission to build a better future for female health.
- Backed by a $200M investment, Flo became the first product of its kind to reach a $1B valuation in 2024.
- With 7M paid subscribers and the highest-rated experience in the App Store’s health category, Flo has spent 10 years earning trust at scale.
- The company is building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help users know their body better.
- Flo is a mission-led, product-driven team that moves fast, stays focused, and takes ownership.
Equal Opportunity
- At Flo, hiring is based on merit, skill and what you bring to the role – nothing else.
- We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities.