> Markdown version of [/jobs/ext/3234381-principal-security-architect-applications-and-data](https://www.wearedevelopers.com/jobs/ext/3234381-principal-security-architect-applications-and-data). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Security Architect - Applications and Data

- **Company:** Co-op
- **Location:** Manchester, UK
- **Salary:** £80,000.0 - £90,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Amazon S3, Microsoft Azure, Big Data, Customer Data Management, Data as a Services, Information Leak Prevention, Data Security, DevOps, Identity and Access Management, Information Lifecycle Management, Open Web Application Security, Cloud Services, Zero Trust Network Access, Salesforce.Com, SAP (Applications), Secure Coding, Software Engineering, Enterprise Software Applications, Software Security, Mitre Att&ck, Data Lakes, Kubernetes, Databricks, Microservices
- **Published:** September 2, 2026
- **Apply:** https://hcnq.fa.em2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX/job/1071198/apply/email?mode=location

## About the Role

We're committed to making our roles as accessible as possible, so we only ask for the minimum criteria. To thrive here, you'll need to bring:

 * Strong experience in cloud-native architecture, including API integration, microservices, Kubernetes, and secure software development across Azure and/or AWS
 * Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes
 * Experience working across enterprise and solution architecture, with strong knowledge of application security, data security, and modern engineering practices
 * Experience securing enterprise applications such as SAP, Salesforce, or Dynamics, and large-scale data platforms such as Data Lake, S3, or Databricks
 * Knowledge of data loss prevention, data lifecycle management, and relevant regulations such as GDPR
 * The ability to influence senior partners and provide clear technical leadership

## Description

We're looking for a Principal Security Architect to join our Technology team and provide expert leadership and oversight around our applications and data security architecture. In this role, you'll help ensure security is designed into our products, platforms, applications and data services from the outset, providing strategic direction, governance and assurance across some of our Co-op's most important technology.

Why this role matters

As we continue to evolve our technology landscape at Co-op, it's vital that we protect critical applications, services, and data across our business. By embedding secure-by-design principles into everything from cloud platforms and APIs to customer data and digital products, you'll help reduce risk and make sure we're delivering technology in the right way.

What you'll do

 * Lead our application and data security architecture, setting standards, principles, and best practices as per Industry Frameworks (NIST, CIS and Zero Trust)
 * Make sure secure-by-design approaches are embedded into applications, platforms, APIs, cloud solutions, and data services using the Shift left methodology
 * Provide expert security guidance and assurance across the wider business
 * Lead threat modelling activities and support informed decision-making around security risks, controls, and trade offs
 * Define and maintain security patterns covering areas such as secure development, data protection, access management, cryptography, and API security
 * Contribute to architecture governance, audits, and regulatory reviews
 * Collaborate with architects, engineers, and senior colleagues to drive secure, resilient, and scalable technology outcomes across Co-op