WE’VE SIGNED UP FOR AN AMBITIOUS JOURNEY. JOIN US!

As Arrive, we guide customers and communities towards brighter futures and more livable cities, it isn’t a challenge just anyone

could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and

Together.

Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time

began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For

ourselves. As a global team, we are transforming urban mobility. Let’s grow better together.

ROLE SUMMARY

The Application Security Architect is a senior, influential role responsible for orchestrating and leading Arrive’s global

application security strategy. As a core member of the Global Security Architecture & Engineering team, you will act as the

central driver for how we securely design, build, and deploy software across the company.

Your primary focus is to unite our efforts by creating, standardizing, and scaling our Secure Software Development Lifecycle

(SSDLC) globally. This involves building upon the expertise and best practices that already exist within our teams and forging a

powerful partnership with the Platform Security team in Engineering. You will lead by unifying—setting global standards that

empower our developers and security engineers and ensuring the security of our next generation of products and platforms.

YOUR MISSION

To elevate and unify our application security program at Arrive. Your mission is to be a force-multiplier for our engineering

teams, fostering a secure development culture that is built on a foundation of clear global standards, strong partnerships, and

modern security practices. You will ensure that security is a shared goal and a collective achievement.

KEY RESPONSIBILITIES

Application Security Strategy & Standards

Champion and orchestrate the definition of Arrive’s global Secure Software Development Lifecycle (SSDLC), from threat modeling

to secure release, in close partnership with key stakeholders across Engineering and IT.

Develop and maintain a comprehensive set of global security standards, baselines, and guidelines for secure coding,

vulnerability management, and secure architecture.

Create and champion the strategy for our application security tooling, including SAST, DAST, IAST, and Software Composition

Analysis (SCA).

Define and manage the application security standards for Mergers & Acquisitions, establishing clear requirements and guiding

the architectural integration of acquired technologies.

Technical Partnership & Enablement

Act as a lead security consultant and strategic partner for product and engineering teams, providing expert guidance on secure

design patterns and vulnerability remediation.

Forge a dynamic partnership with the Platform Security team: co-design the security tooling roadmap, consume their platforms

where they meet global standards, and introduce new architectural patterns where needed.

Lead security architecture reviews and threat modeling sessions for new applications and high-risk features.

Act as a senior mentor and advocate for security engineers and champions across the organization, helping to grow our security

talent.

Emerging Threats & Innovation

Stay at the forefront of emerging application security threats, with a particular focus on the risks associated with AI/ML

systems.

Collaborate with Data & AI teams to develop security principles and architectural patterns for securely integrating AI into our

products.

Drive innovation in our security practices, continuously seeking opportunities to automate and improve the effectiveness of our

AppSec program.

Lead the strategy for leveraging AI within the AppSec program, both to mature the SSDLC and to establish the secure-by-design

principles required for our AI-first engineering landscape.

WHAT YOU BRING

Deep AppSec Expertise: Extensive, hands-on experience in application security, with mastery of the SSDLC, secure coding

principles, and common vulnerability classes (OWASP Top 10, etc.).

A Builder of Standards: Proven experience creating, documenting, and rolling out security standards, patterns, and best

practices in a complex engineering environment.

A Unifier and Partner: Exceptional ability to foster collaboration and influence engineering teams without direct authority.

You build bridges, operate "together," and break down silos.

Strategic Thinker: Ability to see the big picture, define a long-term strategy for application security, and translate it into

an actionable plan.

Modern Technologist: Strong understanding of modern software development practices, including cloud-native architectures, CI/CD

pipelines, containerization, and Infrastructure as Code.

QUALIFICATIONS

10+ years of experience in technology, with at least 7 years in a dedicated application security or product security role.

Demonstrated experience designing and implementing a Secure SDLC in a cloud-native environment (GCP, AWS).

Hands-on experience with the architecture and strategy of AppSec tools (e.g., Snyk, Checkmarx, Veracode,).

Experience with securing microservices architectures, APIs, and modern web/mobile applications.

Experience with securing AI/ML systems

A Bachelor’s degree in a relevant field or equivalent professional experience.

WHY JOIN ARRIVE

Be the global leader and define the future of application security at a mission-driven, transformative company.

Operate as a senior expert within a strategic architecture team, with a broad mandate to influence security across all of

Arrive’s products.

Work at the cutting edge of securing technology, including multi-cloud and AI-driven mobility solutions.

Role

Lead Application Security Architect

Similar Jobs

Principal Engineer, Product Security

commercetools•London

ABOUT COMMERCETOOLS Real innovation starts with a strong foundation, and at commercetools, that comes from the perfect balance of our product and our people. Behind every leap forward is a collective of builders, explorers, doers, makers, and problem-solvers. The kind of people who not only pioneered a more flexible approach to commerce architecture but also shaped the culture of experimentation that approach unlocked. Together they are the engine of commerce innovation today. At commercetools, we power the next era of commerce for our customers. Whether it’s AI-driven solutions that help enterprises make smarter business decisions, bridging digital and physical shopping experiences, or enabling entirely new ways for industries to connect with their customers, we help the world’s most ambitious companies experiment, scale, and grow without limits. Here the best idea wins, not the loudest voice. You will have the tools, trust, and space to not only build the future of commerce, but to build your own. YOUR IMPACT As our Principal Engineer Product Security , you’ll support the Engineering team by solving challenging technical problems for an ambitious product and enabling teams to "shift left" to build secure services on multi-cloud infrastructure. You will: * Formulate, evangelise, and drive adoption of the product security strategy * Assess, advise on, and increase the security maturity posture * Create a standardised security architecture and operational best practices * Help track and drive remediation of security and technology risks * Educate product teams on risk assessments, threat modelling, and building secure api-first applications * Review requirements and designs to help product teams address shortcomings * Embed security tooling into the development process * Contribute to the review of external penetration tests and help teams prioritise fixes * Collaborate with product teams to improve overall security and resolve specific issues * Facilitate or lead customer conversations regarding product security * Triage and investigate new attack vectors to determine risk mitigation * Drive security and quality initiatives across the organization and support certification audits * Collaborate with Product Management, Principal Engineers, and legal/compliance teams * Identify skills gaps and facilitate knowledge sharing across the organization This role is hybrid, with three days a week spent in our Berlin, London or Valencia office. WHAT SETS YOU APART You're a creative problem-solver who is wired to find solutions. You confidently dive into complex challenges and have a talent for making them simple for others. Your curiosity drives you to constantly grow and contribute to an environment of trust and teamwork. Great ideas come from many paths, and your unique perspective matters more than checking every box. What matters most is the mindset you bring to the work. You bring: * A strong technical background and 5+ years of proven track record in hands-on Product Security * 2+ years of experience improving Product Security in a leadership role * Experience with customer-facing security roles and influencing roadmaps in matrix organizations * Experience in a scale-up environment with ambitious and competing priorities * Expertise in formulating, elaborating, and clarifying requirements or priorities * Experience with Secure Architecture design reviews and Threat Modeling * Experience infusing security into various levels of the SDLC * Experience with Static Analysis and Secure Code Review implementations * Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, API, and web application security * Practical experience in DevSecOps and proficiency in at least one scripting language like JavaScript or Go * Project management experience for projects affecting multiple teams * Experience working within an Agile environment with a strong customer focus * Experience setting up and running trainings or onboardings * Clear written and verbal communication in fluent English AI Aptitude: A genuine curiosity for using AI tools to work smarter and more effectively, paired with a drive to learn and put them into practice in your role. Nice to Have: * Security Certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certifications * An eagerness to constantly improve and learn about leadership and new technologies OUR BENEFITS Because work and life are connected, our benefits are too. We’ve designed them to give you the security, flexibility, and opportunities you need to focus on what matters most. 🩺 Comprehensive health benefits for you and your dependents, including access to OpenUp for personalized mental health support 📚 Learning and development opportunities including an annual learning budget, access to self-paced learning platforms and language training, personalized coaching, mentorship, and leadership programs 🍼 Family Leave Plus gives you additional fully paid weeks of parental leave on top of government-provided leave, so you can spend more time with your new addition 📈 Our equity participation program allows you to share in our success For more information on our benefits, visit this page. Come as you are. Build with us. Your unique perspective is essential to our success. We are committed to building a team that reflects the world around us because we know it’s the only way to build the future. We celebrate our differences and have created a hiring process that’s fair, inclusive, and designed to let your talent shine. We proudly welcome applicants of every race, color, religion, gender identity, sexual orientation, age, and any other part of your identity that makes you who you are. As an equal opportunity employer, we believe that our strength lies in our diversity, and we invite you to be a part of our global community. For more information on our diversity, equity, inclusion, and belonging practices, visit this page.

Deadline: Aug 16Posted: Jul 7

Software Engineer - IAM, Aura

Neo4j•London

About Neo4j: Neo4j is the graph intelligence platform that transforms data into knowledge to power the next generation of intelligent applications and AI systems. It includes enterprise-ready knowledge graphs for accurate, explainable, and governed AI; the most comprehensive, trusted, and easy-to-deploy graph capabilities across any environment and data source; and an unmatched ecosystem trusted by 84 of the Fortune 100 and supported by the world’s largest graph community. Intelligence that works. Results that matter. Built to work everywhere and integrate with everything across every cloud for dynamic, personalized, and autonomous AI systems. We deliver quicker results, contextual knowledge, and solutions that impact customers and employees across the business. Our Vision: At Neo4j, we have always strived to help the world make sense of data. As business, society and knowledge become increasingly connected, our technology promotes innovation by helping organizations to find and understand data relationships. We created, drive and lead the graph database category, and we’re disrupting how organizations leverage their data to innovate and stay competitive. The Team: Neo4j’s managed cloud offering, Aura, brings the power of graph databases to the cloud. We are seeking an experienced Software Engineer - Identity and Access Management to architect, implement, and manage enterprise IAM strategies. This role requires strong technical skills and a keen interest in the identity and access management (IAM) domain and is a good fit for someone who enjoys working with different teams to build secure, scalable, and compliant IAM solutions for AuraDB. You will work closely with security architecture, development, infrastructure, and product teams to consolidate IAM capabilities across critical applications and systems. This position is ideal for someone who thrives in both planning and hands-on execution. The Role: IAM Architecture & Implementation * Contribute to shaping the IAM roadmap and design an architecture that brings together the IAM domains across Aura. * Develop and maintain scalable IAM solutions including identity governance and authentication frameworks. Authentication & Authorization * Implement and manage tooling for configuring authentication protocols (OAuth2, OIDC, SAML, LDAP, MFA) and lifecycle management (SCIM). * Integrate with enterprise SSO providers (Okta, Azure AD, Ping Identity, etc). * Design and implement relevant access control paradigms for differing business use cases (RBAC, ABAC, PBAC, ReBAC, FGA). * Manage application authentication via Auth0. * Develop access control policies based on least privilege principles. * Support various authentication and encryption methods: JWT, service accounts, workload identity including SPIFFE/SPIRE, client credentials, mTLS, request signing. Security & Compliance * Apply zero trust principles and secure identity patterns for internal/external systems. * Assess and manage IAM attack surfaces and ensure compliance with industry standards and regulatory requirements (SOC 2). Collaboration & Leadership * Collaborate with engineering, UX, and business stakeholders using Agile methodologies. * Mentor team members on IAM technologies and best practices. * Produce clear, well-structured documentation for technical and non-technical audiences EXPERIENCE: Required * 7+ years of backend development or software engineering experience. * Familiarity and exposure to software development with IAM systems (Okta, Auth0, Ping Identity, Oracle Access Manager, AWS IAM, Azure AD/Entra ID). * Deep understanding of IAM principles, authentication/authorization protocols, and identity lifecycle management. * Solid grasp of identity security frameworks, protocols, and secure design patterns. * Experience with Python or GoLang. * Experience with at least one of the major cloud providers (GCP, AWS, Azure). Preferred * 3+ years of professional experience in Identity and Access Management. * Familiarity with Kubernetes #Li-Hybrid Why Join Neo4j? Neo4j is, without question, the most popular graph intelligence platform in the world. We have customers in every industry globally, and our products are a proven product/market fit. Joining our team is an opportunity to shape the future of data and analytics. Below are just a few exciting facts about Neo4j. * Neo4j is one of the fastest-scaling technology companies in this industry. It recently surpassed $200M in annual recurring revenue (ARR), doubling its ARR over the past three years. * Raised the biggest funding round in database history ($325M Series F). Backed by world-class investors like Eurazeo, GV (formerly Google Ventures), and Inovia Capital, Neo4j has raised over $600M in funding and is currently valued at over $2Bn. This puts Neo4j among the most well-funded database companies in history. * 84% of the Fortune 100 and 58% of the Fortune 500 use Neo4j. Examples include Boston Scientific, BT Group, Caterpillar, Cisco, Comcast, Department for Education UK, eBay, NBC News, Novo Nordisk, Worldline, and others. * Co-founder and CEO Emil Eifrem has built an amazing culture that prides itself on relationships, inclusiveness, innovation, and customer success. * Countless industry awards. Massive enterprises and individual developers/data scientists love Neo4j. A strong sense of community and ecosystem is built around the platform. * A recent Forrester Total Economic Impact™ Study cited Neo4j as delivering 417% ROI to customers. Research shows that members of underrepresented communities are less likely to apply for jobs when they don’t meet all the qualifications. If this is part of the reason you hesitate to apply, we’d encourage you to reconsider and give us the opportunity to review your application. At Neo4j, we are committed to building awareness and helping to improve these issues. One of our central objectives is to provide an inclusive, diverse, and equitable workplace for everyone to develop their potential and have a positive, career-defining experience. We look forward to receiving your application. Neo4j Values: Neo4j is a Silicon Valley company with a Swedish soul. We foster collaboration and each of us is empowered to contribute and put our innovative stamp on projects. We hire candidates who reflect the following Neo4j core values: (we)-[:VALUE]->(relationships) (we)-[:FOCUS_ON]->(userSuccess) (we)-[:THRIVE_IN]->(:Culture {type: [‘Open’, ‘Inclusive’]}) (we)-[:ASSUME]->(:Intent {direction:’Positive’}) (we)-[:WELCOME]->(:Discussions {nature: ‘IntellectuallyHonest’}) (we)-[:DELIVER_ON]->(ourCommitments) Neo4j is committed to protecting and respecting your privacy. Please read the privacy notice regarding Neo4j's recruitment process to understand how we will handle the personal data that you provide. More information at www.neo4j.com. ©2026 Neo4j, Inc., Neo Technology®, Neo4j®, Cypher®, Neo4j Bloom™, Neo4j Graph Data Science Library™, Neo4j® Aura™, and Neo4j® AuraDB™ are registered trademarks or a trademark of Neo4j, Inc. All other marks are owned by their respective companies.

Deadline: Aug 16Posted: Jun 11

Software Engineer - Cloud Platform (Networks)

Neo4j•London

About Neo4j: Neo4j is the graph intelligence platform that transforms data into knowledge to power the next generation of intelligent applications and AI systems. It includes enterprise-ready knowledge graphs for accurate, explainable, and governed AI; the most comprehensive, trusted, and easy-to-deploy graph capabilities across any environment and data source; and an unmatched ecosystem trusted by 84 of the Fortune 100 and supported by the world’s largest graph community. Intelligence that works. Results that matter. Built to work everywhere and integrate with everything across every cloud for dynamic, personalized, and autonomous AI systems. We deliver quicker results, contextual knowledge, and solutions that impact customers and employees across the business. Our Vision: At Neo4j, we have always strived to help the world make sense of data. As business, society and knowledge become increasingly connected, our technology promotes innovation by helping organizations to find and understand data relationships. We created, drive and lead the graph database category, and we’re disrupting how organizations leverage their data to innovate and stay competitive. The Team: The managed cloud offering from Neo4j is called Aura (DBaaS) and we are now looking to expand our Aura team with more skilled Engineers. As of today, Aura is running hundreds of managed Kubernetes clusters in production across multiple CSPs and brings the power of the Neo4j Graph Intelligence Platform. Now, we are looking for experienced Software Engineers with Kubernetes experience to join our Networking team to develop the system further to handle future load and functionality. THE ROLE: * Collaborate with your team to design, develop, and maintain the cloud networking foundation that powers our cutting-edge solutions. * Partner closely with teams across Neo4j’s cloud organization, Aura, to shape and deliver an ambitious roadmap for cloud networking as we scale globally. * Tackle complex and exciting engineering challenges in a rapidly growing area of focus, where your work will directly influence the performance, reliability, and scalability of our platform. REQUIRED AREAS OF EXPERIENCE: * Advanced knowledge of Google Cloud, AWS and/or Azure * Agile software development within a team environment * Good working knowledge of Go * Experience building and operating software on Kubernetes * Cloud Networking and Kubernetes Networking fundamentals * Working in a 24/7/365 SaaS environment * Solid understanding of DNS, TLS, mTLS, SNI and L4/L7 Proxies (Envoy) * Build and deployment pipelines employing continuous delivery NICE TO HAVE AREAS OF EXPERIENCE: * Multi Tenancy Environments * GCP Private Service Connect * AWS/Azure PrivateLink * Writing Kubernetes Operators * Kubernetes internal networks (Cilium, eBPF, Traefik, Calico, Linkerd, Istio, Consul) * Kubernetes network security * Architecting for high availability #LI-Hybrid Why Join Neo4j? Neo4j is, without question, the most popular graph intelligence platform in the world. We have customers in every industry globally, and our products are a proven product/market fit. Joining our team is an opportunity to shape the future of data and analytics. Below are just a few exciting facts about Neo4j. * Neo4j is one of the fastest-scaling technology companies in this industry. It recently surpassed $200M in annual recurring revenue (ARR), doubling its ARR over the past three years. * Raised the biggest funding round in database history ($325M Series F). Backed by world-class investors like Eurazeo, GV (formerly Google Ventures), and Inovia Capital, Neo4j has raised over $600M in funding and is currently valued at over $2Bn. This puts Neo4j among the most well-funded database companies in history. * 84% of the Fortune 100 and 58% of the Fortune 500 use Neo4j. Examples include Boston Scientific, BT Group, Caterpillar, Cisco, Comcast, Department for Education UK, eBay, NBC News, Novo Nordisk, Worldline, and others. * Co-founder and CEO Emil Eifrem has built an amazing culture that prides itself on relationships, inclusiveness, innovation, and customer success. * Countless industry awards. Massive enterprises and individual developers/data scientists love Neo4j. A strong sense of community and ecosystem is built around the platform. * A recent Forrester Total Economic Impact™ Study cited Neo4j as delivering 417% ROI to customers. Research shows that members of underrepresented communities are less likely to apply for jobs when they don’t meet all the qualifications. If this is part of the reason you hesitate to apply, we’d encourage you to reconsider and give us the opportunity to review your application. At Neo4j, we are committed to building awareness and helping to improve these issues. One of our central objectives is to provide an inclusive, diverse, and equitable workplace for everyone to develop their potential and have a positive, career-defining experience. We look forward to receiving your application. Neo4j Values: Neo4j is a Silicon Valley company with a Swedish soul. We foster collaboration and each of us is empowered to contribute and put our innovative stamp on projects. We hire candidates who reflect the following Neo4j core values: (we)-[:VALUE]->(relationships) (we)-[:FOCUS_ON]->(userSuccess) (we)-[:THRIVE_IN]->(:Culture {type: [‘Open’, ‘Inclusive’]}) (we)-[:ASSUME]->(:Intent {direction:’Positive’}) (we)-[:WELCOME]->(:Discussions {nature: ‘IntellectuallyHonest’}) (we)-[:DELIVER_ON]->(ourCommitments) Neo4j is committed to protecting and respecting your privacy. Please read the privacy notice regarding Neo4j's recruitment process to understand how we will handle the personal data that you provide. More information at www.neo4j.com. ©2026 Neo4j, Inc., Neo Technology®, Neo4j®, Cypher®, Neo4j Bloom™, Neo4j Graph Data Science Library™, Neo4j® Aura™, and Neo4j® AuraDB™ are registered trademarks or a trademark of Neo4j, Inc. All other marks are owned by their respective companies.

Deadline: Aug 16Posted: Jun 25