{"id":2089238,"url":"https://alion.io/job/infront-global-security-architect","title":"Global Security Architect","company":{"id":111299,"name":"Infront","domain":"infront.agency","url":"https://alion.io/company/infront","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":["ES"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":146000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":576},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Apache Kafka","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Keycloak","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false}],"status":"live","first_seen_at":"2026-10-08T13:06:20Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-13T07:03:52Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"At Infront, we help major banks and independent wealth and asset managers make faster, smarter, compliant investment decisions. For decades, we have been at the heart of Europe’s financial services infrastructure, providing financial data and investment tools, from intelligent data feeds to wealth management platforms and trading solutions, and empowering over ninety thousand professionals to navigate complex markets with confidence.\nWe build technology, but our people power us. We foster an inclusive workplace where diverse perspectives drive innovation and results, guided by our shared values of engagement, communication and recognition. Together, we collaborate, commit to innovation and shape the future of our industry, building a culture of trust, transparency and enjoyment.\nPurpose of the role\nInfront builds and operates financial technology products for banks and asset managers across thirteen countries, on a technology estate that has grown by acquisition. Today, security is built in product by product: encryption, authentication, secrets handling and logging are solved differently in each, by whoever built it. The Global Security Architect owns how security is designed into Infront's products, replacing that patchwork with shared patterns the teams can adopt and reuse.\nThe role sits in engineering and reports to the Head of Information Security for mandate and standards. It spends its days with the teams that build the products, in the architecture forum, in design reviews, and alongside the Security Champions it coordinates. Success means new products and material changes are secure by design from the start.\nAccountabilities\nOwn the reference security patterns for Infront's products: authentication and authorisation, encryption and key handling, secrets management, logging and telemetry, and secure service-to-service communication. Publish them, keep them current, and see them adopted.\nOwn the Secure Development Standard and the security gates in the build and deployment pipeline, including continuous scanning that covers components embedded in Infront's own software, not only what is installed on hosts.\nLead threat modelling and security design review for new products and material changes, proportionate to risk, and record the outcome so it is auditable.\nBe the technical lead for identity architecture across the estate: the enterprise identity provider, the product authentication platform and the trading authorisation layer, including succession planning for platforms that today depend on a single person.\nOwn security architecture for the cloud estate, across multiple AWS accounts and Azure tenants, and for the boundary between shared and isolated platform instances.\nCoordinate the Security Champions, one named engineer per product area, as a dotted-line community: set their agenda, give them patterns to apply, and use them to reach every team.\nRepresent security in the architecture forum and in the Cyber Resilience Act secure-by-design work, and translate regulatory expectations into engineering decisions.\nProvide the application-layer input to vulnerability prioritisation and penetration test scoping, so that testing concentrates on the shared components most products depend on.\nWhat you will do in the first six months\nPublish the first three reference patterns, encryption, authentication and secrets, and get them adopted by at least one product team each.\nEnable continuous pipeline scanning for embedded components across the priority products, with a named owner for findings in each team.\nProduce the identity architecture and succession plan for the product authentication and authorisation platforms.\nStand up the Security Champions community with a named champion in every product area and a monthly cadence.\nConsolidate Infront's four overlapping secure development policy drafts into one standard that engineers will actually use.\nComplete threat models for the five shared components on which most priority products depend.\nExperience and skills, essential\nSubstantial experience designing security into software products, in a company that builds and operates its own platforms, ideally financial technology or another regulated SaaS environment.\nHands-on depth in application security and secure development: threat modelling, OWASP-aligned secure coding, SAST, SCA and secrets scanning in CI/CD, and what it takes to get engineers to adopt them.\nCloud security architecture across AWS and Azure, including multi-account governance, container platforms and infrastructure as code.\nIdentity and access architecture: enterprise identity providers, single sign-on, OAuth and OIDC, and product-level authentication platforms of the Keycloak type.\nCryptography applied in practice: what to use, where, and how to manage keys and certificates, rather than theory.\nThe credibility to influence engineers without line authority, and the judgement to know when a pattern must be mandatory and when it can be guidance.\nFluent English is a must.\nExperience and skills, valued\nExperience in a group grown by acquisition, where the same problem has been solved several ways and the job is to converge them.\nFamiliarity with DORA and the Cyber Resilience Act as they apply to a technology supplier to financial institutions.\nKubernetes and Kafka security in mixed shared and isolated deployments.\nBuilding or running a Security Champions programme.\nNorwegian, German, French, Italian or Spanish.\nHow you work\nYou would rather ship a pattern that three teams adopt than a document that all of them ignore.\nYou explain a security decision in terms an engineer can act on and a product owner can prioritise.\nYou are comfortable being the only security person in a room full of developers, and you make that a strength.\nYou know the difference between a control that must be enforced and one that should be made easy, and you build accordingly.\nWhat this role is not\nNot a governance or policy role. The Head of Information Security owns policy, risk and reporting; this role owns how security is built.\nNot an operations role. Endpoints, patching, provisioning and monitoring are run by ITIO and the managed detection provider; the Security Engineer configures them.\nNot a line manager of engineers. The Security Champions report to their product teams; this role leads them by pattern and agenda.\nOur offer\nWhile our benefits may vary depending on your location, they typically include:\nHealth & wellness: Benefit from wellbeing initiatives tailored to local needs, including access to an employee assistance programme that provides confidential support to employees and their families.\nHoliday: Enjoy competitive holiday entitlement aligned with local markets, so you can rest and recharge.\nRemote work: Enjoy the flexibility to work part of your week from home, with flexible working hours where possible. You may also request to work up to four weeks per year from a different location.\nLearning & development: Support your career progression with access to learning resources, ongoing conversations with your manager, and opportunities to share the knowledge you gain with your team.\nCulture & impact: Be part of an international team with a startup mindset and play a key role in making a meaningful impact.\nOur offices: Work from Europe’s leading financial centres and be at the heart of where finance happens.\nAdditional notes\nAll candidates selected for employment are subject to Pre-Employment Screening. This process includes professional reference and background checks conducted by our third-party partner, ZINC. These screenings are part of our commitment to ensuring a secure, compliant, and trustworthy workplace.\nSince your application will be reviewed by an international team, we kindly ask that you submit your CV in English.\nPlease note that visa sponsorship is not available for this position, and applicants should have the right to work in the hiring location.","description_format":"text","description_chars":7953,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-08T13:51:25Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":26,"reasons":["conf:1","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/infront-global-security-architect","json_url":"https://alion.io/job/infront-global-security-architect.json","meta":{"generated_at":"2026-10-13T09:50:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14866,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":111299},"rest":"https://alion.io/mcp/rest/get_company?id=111299"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finfront-global-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finfront-global-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finfront-global-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/infront-global-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finfront-global-security-architect"}]}