Product Security Architect

Flutter Entertainment Plc; Leeds; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading entertainment company is seeking a Senior Product Security Architect to lead the application security strategy. This role emphasizes security in product development across global regions, ensuring compliance with the highest standards. The ideal candidate has extensive experience in software development and application security, alongside a robust background in security architecture. The position offers a hybrid working model, combining on-site presence with flexibility.

Benefits

Bonus scheme

Uncapped holiday allowance

Enhanced pension scheme

Private healthcare

Life assurance

Income protection

£1,000 annual self-development learning fund

Invest via Flutter Sharesave Scheme

Enhanced parental leave

Qualifications

• Extensive experience in software development and application security.
• Proven track record designing enterprise-scale secure development programs.
• Deep understanding of CI/CD ecosystems.

Responsibilities

• Define and lead the enterprise-wide Application Security strategy.
• Evaluate and support rollout of AppSec tools.
• Align strategies with Group Enterprise Security.

Skills

Leadership in AppSec

Application security expertise

CI/CD security integration

Tool integration experience

Education

Certifications such as CISSP/CSSLP, CISM

Tools

SonarCloud

Checkmarx

GitHub Advanced Security

Snyk

Aqua

Prisma Cloud

Semgrep

Job description

Product Security Architect – Senior

Flutter Entertainment invites you to join as a Senior Product Security Architect. This role focuses on securing product development across all regions and brands, ensuring application, infrastructure, and third‑party components meet the highest security standards.

Location & Work Model

Leeds / Dublin – Hybrid (2 days per week on site)

Overview

The Senior Product Security Architect defines, evolves, and champions a group‑wide Product Security strategy. Operating in a federated environment, the role delivers strategic guidance, technical direction, and hands‑on expertise to embed security into development lifecycles. The position is key advisor on AppSec standards, threat modelling, and security tooling, ensuring consistency and maturity across Flutter’s software estate.

About Division / Function

Flutter operates two commercial divisions (Fanduel and International) plus central functions such as COO, Finance & Legal. The Flutter Edge drives differentiation across Product, Tech, Expertise, and Scale, supporting Product & Payments, Technology, Sportsbook Product & Trading, People, Property, Corporate Communications and Transformation.

Responsibilities

• Strategic Leadership & Roadmap: Define and lead the enterprise‑wide Application Security and SSDLC strategy, develop AppSec maturity models, and drive global secure development policy.
• Technology & Tooling Strategy: Evaluate and support rollout of AppSec tools (SAST, DAST, SCA, container & IaC scanners, CI/CD integration), and guide secure design patterns in cloud‑native environments.
• Global Collaboration: Align strategies with Group Enterprise Security, monitor key AppSec KPIs, report to leadership, coordinate architecture reviews, and provide threat‑modelling support.
• Continuous Improvement & Innovation: Evaluate emerging technologies, reduce friction for developers, plan for incident response and disaster recovery, and elevate program maturity.
• Project & Vendor Management: Manage Secure by Design projects, coordinate with vendors, ensure solutions meet group policies, and oversee integration partners.

Qualifications & Experience

• Extensive experience in software development and application security with leadership in AppSec or Security Architecture.
• Proven track record designing enterprise‑scale secure development programs.
• Experience integrating tools such as SonarCloud, Checkmarx, GitHub Advanced Security, Snyk, Aqua, Prisma Cloud, Semgrep.
• Deep understanding of CI/CD ecosystems (GitLab, Jenkins, Azure DevOps, GitHub Actions) and embedding security in build pipelines.
• Background in regulated industries or large enterprises is highly desirable.
• Experience with mergers and acquisitions integration is a plus.
• Familiarity with frameworks: OWASP SAMM, ASVS, BSIMM, NIST SSDF, ISO 27034.
• Leadership experience in DevSecOps, security architecture, or SSDLC initiatives.
• Professional certifications such as CISSP/CSSLP, CISM, or AppSec‑specific credentials are valued.

Benefits

• Bonus scheme
• Uncapped holiday allowance
• Enhanced pension scheme
• Private healthcare
• Life assurance
• Income protection
• £1,000 annual self‑development learning fund
• Invest via Flutter Sharesave Scheme
• Enhanced parental leave

Equal Opportunity

Flutter is an inclusive employer. We encourage applicants from all backgrounds, ways of thinking, and work styles. Adjustments can be made to accommodate your needs.