Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, Sky Stream to Sky Glass, we never stand still. We optimise and innovate. We turn big ideas into the products, content and services millions of people love. And we do it all right here at Sky.
Role overview
We are looking for a new Security Architect to support the design and improvement of security across Sky’s Anti-Piracy technology estate.
This role is ideal for someone with a strong technical foundation who is ready to step into security architecture, helping to establish a clear security baseline across both on-premise and cloud environments. You will work closely with engineering, data, and platform teams to identify risks, manage vulnerabilities, and embed secure-by-design practices.
What you’ll do:
- Develop and maintain a security architecture baseline across the Anti-Piracy estate, reviewing on-premises and cloud platforms to identify security gaps, risks, and improvement opportunities.
- Own and drive vulnerability management across infrastructure and applications, including vulnerability analysis, penetration testing, exploit research, and remediation tracking.
- Conduct security assessments across IPTV ecosystems, applications, set-top boxes (STBs), Android devices, cloud backends, and associated technologies.
- Partner with engineering, platform, data, and SRE teams to improve security visibility, reduce risk exposure, and enhance the overall security posture of Anti-Piracy systems.
- Define, document, and promote security standards, architectural patterns, best practices, and clear security documentation across the organisation.
- Support threat modelling, risk assessments, and the adoption of secure-by-design principles throughout technology delivery pipelines and system lifecycles.
- ·Lead software research and development activities for Anti-Piracy tooling, counter-measures, and innovative security capabilities.
- ·Design, build, and evaluate proof-of-concepts for detection, disruption, and takedown operations, while supporting covert operational activities, including regulated law-enforcement warrant support.
Essential Criteria:
- Experience in security engineering, infrastructure, network security, systems administration, or a related technical discipline, with a strong interest in developing security architecture expertise.
- Good understanding of security architecture principles and frameworks, including defence-in-depth, zero trust, least privilege, and risk-based security approaches, with awareness of standards such as ISO 27001 and NIST CSF.
- Experience of, or exposure to, vulnerability management processes, including vulnerability assessment, remediation tracking, risk prioritisation, and security testing activities.
- Understanding of security operations concepts, including security monitoring, incident response, SIEM platforms, managed detection and response (MDR), and threat investigation practices.
- Knowledge of cloud and hybrid environments (preferably GCP), alongside a solid understanding of Linux, Windows, networking fundamentals, and infrastructure security controls.
- Ability to identify, assess, and communicate technical risks, security weaknesses, and remediation recommendations to both technical and non-technical stakeholders.
- Strong collaboration and stakeholder engagement skills, with the ability to work effectively across engineering, platform, data, SRE, and business teams, and to create and maintain high-quality architecture, security, and technical documentation.
- A proactive and curious mindset, demonstrating a willingness to learn, challenge assumptions, and develop towards a Security Architecture role through mentoring, training, and hands-on experience.
Desirable Criteria:
- Experience with penetration testing, application security testing, threat modelling, or security assessment activities.
- Exposure to media, streaming, or content delivery platforms
- Experience with security tools (e.g. vulnerability scanners, SIEM, endpoint protection)
- Basic understanding of threat modelling techniques
- Experience working in hybrid (on-prem + cloud) environments
There's one thing people can't stop talking about when it comes to life at Sky: the perks. Here’s a taster:
- Free Sky TV or NOW package, including Sky Sports and Sky Cinema
- Pension package with up to 9% employer contribution
- Private healthcare with mental health support
- Aviva Digital GP and dental insurance
- Discounts on Sky products, including Sky Mobile, Sky Broadband, Sky Glass and Sky Protect
- Sharesave and Tech schemes
- A range of Sky VIP rewards and experiences
We've adopted a hybrid working approach to give more flexibility on where and how we work. The hybrid working expectations for this role are 3 days in the office per week.
Our Sky Group HQ. Equipped with state-of-the-art technology and workspaces, there’s plenty of space to see your big ideas come to life.
Here you’ll find 13 subsidised restaurants and cafes. You can re-energise at our gym, catch the latest films at our cinema, get your car washed and even get pampered at our beauty salon.
Our Osterley Campus is just a 10-minute walk from Syon Lane train station, or you can get one of our free shuttle buses from Osterley,
Gunnersbury and Ealing Broadway stations. Plus, there’s free onsite parking available for cars, motorbikes and bicycles.
We’re Sky, a leading media and entertainment company who connect millions with entertainment, sports, news and arts through innovative products and services. Working with us means you’ll be bringing the joy of a better experience to more people, every day. All so we can do better and deliver better for our customers, colleagues and society.
We’re an equal opportunity employer and value diversity at our company. We're a Disability Confident Accredited Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need as early as you can.
Just so you know: if your application is successful, we’ll ask you to complete a criminal record check. And depending on the role you have applied for and the nature of any convictions you may have, we might have to withdraw the offer.
To be eligible for this role you are required to have the appropriate right to work in the UK. Please be aware Sky does not offer sponsorship for this position.