Security Architect - Anti-Piracy

We don’t just believe in better. We make it happen.   

Better content. Better products. And better careers.   

Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, Sky Stream to Sky Glass, we never stand still. We optimise and innovate. We turn big ideas into the products, content and services millions of people love. And we do it all right here at Sky.  

Role overview   

We are looking for a new Security Architect to support the design and improvement of security across Sky’s Anti-Piracy technology estate.

This role is ideal for someone with a strong technical foundation who is ready to step into security architecture, helping to establish a clear security baseline across both on-premise and cloud environments. You will work closely with engineering, data, and platform teams to identify risks, manage vulnerabilities, and embed secure-by-design practices.

What you’ll do:

• Develop and maintain a security architecture baseline across the Anti-Piracy estate, reviewing on-premises and cloud platforms to identify security gaps, risks, and improvement opportunities.
• Own and drive vulnerability management across infrastructure and applications, including vulnerability analysis, penetration testing, exploit research, and remediation tracking.
• Conduct security assessments across IPTV ecosystems, applications, set-top boxes (STBs), Android devices, cloud backends, and associated technologies.
• Partner with engineering, platform, data, and SRE teams to improve security visibility, reduce risk exposure, and enhance the overall security posture of Anti-Piracy systems.
• Define, document, and promote security standards, architectural patterns, best practices, and clear security documentation across the organisation.
• Support threat modelling, risk assessments, and the adoption of secure-by-design principles throughout technology delivery pipelines and system lifecycles.
• ·Lead software research and development activities for Anti-Piracy tooling, counter-measures, and innovative security capabilities.
• ·Design, build, and evaluate proof-of-concepts for detection, disruption, and takedown operations, while supporting covert operational activities, including regulated law-enforcement warrant support.
   

Essential Criteria:

• Experience in security engineering, infrastructure, network security, systems administration, or a related technical discipline, with a strong interest in developing security architecture expertise.
• Good understanding of security architecture principles and frameworks, including defence-in-depth, zero trust, least privilege, and risk-based security approaches, with awareness of standards such as ISO 27001 and NIST CSF.
• Experience of, or exposure to, vulnerability management processes, including vulnerability assessment, remediation tracking, risk prioritisation, and security testing activities.
• Understanding of security operations concepts, including security monitoring, incident response, SIEM platforms, managed detection and response (MDR), and threat investigation practices.
• Knowledge of cloud and hybrid environments (preferably GCP), alongside a solid understanding of Linux, Windows, networking fundamentals, and infrastructure security controls.
• Ability to identify, assess, and communicate technical risks, security weaknesses, and remediation recommendations to both technical and non-technical stakeholders.
• Strong collaboration and stakeholder engagement skills, with the ability to work effectively across engineering, platform, data, SRE, and business teams, and to create and maintain high-quality architecture, security, and technical documentation.
• A proactive and curious mindset, demonstrating a willingness to learn, challenge assumptions, and develop towards a Security Architecture role through mentoring, training, and hands-on experience.

Desirable Criteria:

• Experience with penetration testing, application security testing, threat modelling, or security assessment activities.
• Exposure to media, streaming, or content delivery platforms
• Experience with security tools (e.g. vulnerability scanners, SIEM, endpoint protection)
• Basic understanding of threat modelling techniques
• Experience working in hybrid (on-prem + cloud) environments