{"id":1160548,"url":"https://alion.io/job/hellokindred-senior-security-architect-mobile-banking-platforms-2","title":"Senior Security Architect - Mobile Banking Platforms","company":{"id":4311,"name":"HelloKindred","domain":"hellokindred.com","url":"https://alion.io/company/hellokindred","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":589,"max":720,"currency":"ZAR","period":"hour","gross":null,"usd_annual":88000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SBOM","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-22T14:33:32Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-14T13:38:37Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Who is HelloKindred?\nHelloKindred are specialists in staffing marketing, creative and technology roles, offering a range of talent solutions that can be delivered on-site, remotely or hybrid.\nOur vision is to make work accessible and people’s lives better. We do this by disrupting traditional employment barriers - connecting ambitious talent to flexible opportunities with trusted brands.\n Anticipated Contract End Date/Length: October 19th, 2026 - February 28th, 2027\nWork set up: Onsite\nOur client in the global professional services industry is looking for an experienced Senior Security Architect who will be accountable for the end-to-end security architecture of a large-scale, customer-facing mobile banking platform. The role defines, governs, and continuously evolves security across mobile applications, APIs, identity platforms, cloud infrastructure, backend services, shared platform capabilities, and DevSecOps delivery pipelines.\nThis role acts as the security design authority across platform teams and delivery squads, ensuring the mobile banking platform achieves world-class standards for customer trust, cyber resilience, regulatory compliance, privacy, fraud resistance, and secure customer experience.\nWhat you will do:\nOwn the end-to-end security architecture for a large-scale, customer-facing mobile banking platform.\nDefine and govern security across mobile apps, APIs, identity platforms, cloud infrastructure, backend services, shared platforms, and DevSecOps pipelines.\nArchitect strong customer authentication using PIN, biometrics, device-bound cryptographic keys, risk context, and transaction-level authorization.\nDesign PIN-based authentication models where PINs unlock cryptographic keys and are never stored or transmitted.\nDefine biometric-first authentication using Face ID, Touch ID, and platform biometrics through secure enclave and hardware-backed mechanisms.\nGovern secure use of mobile keystores and secure enclaves, including iOS Secure Enclave and Android Hardware Keystore.\nEnsure biometrics are used only for local cryptographic key release and never treated as raw credentials.\nDefine integration with enterprise key vaults and HSMs for signing, encryption, certificate handling, and key lifecycle management.\nOwn OAuth 2.0, OpenID Connect, PKCE, secure token storage, token rotation, and device-bound session models for mobile and web channels.\nDefine API, Backend-for-Frontend, and service security patterns aligned to Zero Trust principles.\nLead threat modelling across onboarding, authentication, payments, card management, account servicing, and other sensitive customer journeys.\nTranslate threats into architecture patterns, security controls, non-functional requirements, and architecture decision records.\nEmbed Security-by-Design into HLDs, LLDs, architecture decision records, release governance, and delivery assurance forums.\nDefine DevSecOps guardrails including SAST, DAST, dependency scanning, secrets management, container scanning, IaC security, and secure release gates.\nSupport penetration testing, vulnerability remediation, incident readiness, forensic readiness, and cyber-resilience initiatives.\nEmbed Privacy-by-Design, consent management, secure data processing, secure data retention, and data lifecycle controls.\nAct as a security design authority across delivery squads, platform teams, engineering teams, product stakeholders, risk, fraud, and compliance functions.\nProvide clear architectural guidance to Engineering, Product, Operations, Fraud, Risk, and executive technology stakeholders.\nBalance security, customer experience, operational resilience, and delivery velocity.\nEnsure the mobile banking platform meets world-class standards for security, trust, resilience, and regulatory compliance.\nAdditional Modern Digital Banking Security responsibilities\nDefine mobile fraud prevention architecture, including device binding, account takeover prevention, mule account detection integration, and transaction risk scoring.\nArchitect device binding and trusted device frameworks using hardware-backed cryptographic identities, secure key stores, and device attestation services.\nDefine transaction signing and transaction verification patterns to support non-repudiation and customer protection for high-risk banking transactions.\nGovern certificate pinning, mutual TLS, secure channel enforcement, and secure API communication models.\nDefine runtime application self-protection and mobile application shielding strategies to detect and prevent tampering, reverse engineering, instrumentation, rooting, and jailbreak attacks.\nArchitect controls against mobile malware, overlays, screen scraping, session hijacking, credential theft, and application manipulation.\nDefine mobile and API bot mitigation, API abuse prevention, anomaly detection, and automated attack protection controls.\nGovern API security controls including rate limiting, schema validation, API gateways, threat protection, security testing, and behavioural anomaly monitoring.\nDefine secure customer onboarding patterns using device reputation, identity verification, fraud signals, behavioural analytics, and risk-based authentication.\nArchitect adaptive authentication using device, location, network, behavioural, transactional, and fraud intelligence signals.\nEstablish security patterns for digital wallets, tokenized payments, QR payments, card management, open banking, and real-time payment ecosystems.\nDefine cloud-native security controls for containerized workloads, Kubernetes platforms, service meshes, cloud services, and platform engineering environments.\nGovern software supply chain security including signed artefacts, SBOM, dependency risk management, secure build pipelines, provenance verification, and release integrity controls.\nEstablish cyber-resilience architecture patterns covering denial-of-service protection, disaster recovery, ransomware resilience, backup integrity, and business continuity.\nDefine security monitoring architecture integrating SIEM, SOAR, threat intelligence, fraud monitoring, application telemetry, audit logging, and incident response workflows.\nGovern security logging, auditability, evidentiary controls, and forensic readiness for regulatory investigations and major incident response.\nAssess and govern third-party, fintech, SaaS, martech, payment, and partner integrations from a security architecture perspective.\nDefine and govern AI and agentic platform security controls including model security, prompt injection prevention, data leakage protection, secure retrieval, authorization, auditability, and responsible AI guardrails.\nEmbed security architecture controls for AI-assisted customer journeys, intelligent agents, digital servicing capabilities, and enterprise AI platforms.\nLead security architecture reviews and risk assessments across Mobile, Web, Backend, Data, Martech, AI, Cloud, Infrastructure, DevOps, Testing, and Shared Platform domains.\nAct as the final security architecture authority for production releases, significant design changes, security waivers, and exceptions impacting the digital banking platform.\n 10+ years of relevant Security Architecture experience, ideally within banking, payments, fintech, financial services, or other regulated digital environments.\nSenior-level security architecture experience in digital banking, payments, fintech, financial services, or other regulated customer-facing digital platforms.\nStrong hands-on understanding of mobile security, API security, identity, cryptography, cloud security, DevSecOps, platform security, fraud controls, and operational resilience.\nAbility to translate business risks and threat scenarios into pragmatic architecture decisions, technical controls, delivery guardrails, and measurable non-functional requirements.\nProven ability to work across engineering, product, architecture, cybersecurity, risk, compliance, fraud, privacy, operations, and executive stakeholders.\nStrong communication skills with the ability to explain complex security topics clearly to technical and non-technical audiences.\nPragmatic delivery mindset with the ability to balance security assurance, customer experience, regulatory expectations, and delivery timelines.\nCISSP, CCSP, CISM, SABSA, TOGAF, Azure Security Engineer, AWS Security Specialty, or equivalent security architecture credentials.\nKnowledge of OWASP MASVS, OWASP ASVS, OWASP Mobile Top 10, OWASP API Security Top 10, NIST, ISO 27001, PCI DSS, POPIA, and banking regulatory expectations.\nExposure to mobile fraud prevention, digital identity, payment security, hardware-backed cryptography, cloud-native security, DevSecOps, and AI security governance.\n Candidates must have a clear background check (BGC), including an ITC (credit) check, to be considered for the role.\n Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.\nHelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.\nWe appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.\nHelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.","description_format":"text","description_chars":9594,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-09-23T23:41:20Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.448,"p_room":0.55,"age_days":21,"expected_fill_days":17,"reasons":["conf:1","agency","velocity","win:tail"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":88000,"is_top_pay":false},"html_url":"https://alion.io/job/hellokindred-senior-security-architect-mobile-banking-platforms-2","json_url":"https://alion.io/job/hellokindred-senior-security-architect-mobile-banking-platforms-2.json","meta":{"generated_at":"2026-10-14T14:17:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17529,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4311},"rest":"https://alion.io/mcp/rest/get_company?id=4311"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhellokindred-senior-security-architect-mobile-banking-platforms-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhellokindred-senior-security-architect-mobile-banking-platforms-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhellokindred-senior-security-architect-mobile-banking-platforms-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hellokindred-senior-security-architect-mobile-banking-platforms-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhellokindred-senior-security-architect-mobile-banking-platforms-2"}]}