Cyber Security Architect & Engineering Lead

DGH Recruitment Limited; Greater London; On-site; GBP 110,000 - 150,000; Full time

Job summary

DGH Recruitment are recruiting on behalf of a leading client in the Accountancy industry who require a Cyber Security Architect & Engineering Lead to join the firm in London. You will translate security strategy into secure designs, practical controls, technical standards and measurable outcomes.

Define and maintain enterprise security architecture across identity, endpoints, networks, cloud, SaaS, data, applications and APIs.

Qualifications

• Extensive cyber security experience in security architecture or engineering roles.
• Hands-on design and implementation of security controls in a Microsoft-centric environment.
• Experience securing generative AI and AI agents, and data-driven applications.
• Strong knowledge of identity security, Zero Trust, cloud security and API security.
• Experience in incident response, threat hunting, and vulnerability management.
• Ability to automate security using Python, PowerShell, or IaC.

Responsibilities

• Define and maintain enterprise security architecture across identity, endpoints, networks, cloud, data and applications.
• Act as the technical lead for AI security, collaborating with business, legal and risk stakeholders.
• Design secure architectures for Microsoft 365 Copilot, Copilot Studio, Azure AI services and model integrations.
• Own the security control catalogue and map objectives to architecture patterns and testing methods.
• Serve as escalation point for high-severity incidents and participate in on-call arrangements.
• Support due diligence for acquisitions with clear risk assessments and required investments.

Skills

Security architecture

Security engineering

Identity security

Zero Trust

Cloud security

Endpoint security

Application security

API security

DevSecOps

AI security

Incident response

Threat hunting

Automation

Python

PowerShell

Azure

Microsoft 365

Entra ID

Tools

Azure

Microsoft Entra ID

Defender XDR

Sentinel

Microsoft Purview

Azure Functions

Job description

Cyber Security Architect & Engineering Lead

DGH Recruitment are currently recruiting on behalf of a leading client in the Accountancy industry who require a Cyber Security Architect & Engineering Lead to join the firm in London.

You will be responsible for translating security strategy and business requirements into secure designs, practical controls, technical standards and measurable outcomes.

Key Responsibilities:

• Define and maintain enterprise security architecture across identity, endpoints, networks, cloud, SaaS, data, applications, APIs, integration platforms and development environments.
• Act as the technical lead for AI security, working alongside business, legal, data protection, risk and responsible AI stakeholders.
• Design secure architectures for Microsoft 365 Copilot, Copilot Studio, AI agents, custom AI applications, retrieval-augmented generation, Azure AI services, third-party models and Model Context Protocol integrations.
• Own the technical security control catalogue and map control objectives to architecture patterns, technology configurations, owners, evidence and testing methods.
• Act as the senior technical escalation point for complex or high-severity incidents and participate in the major incident on-call arrangements.
• Design and strengthen identity security using Microsoft Entra ID, Conditional Access, Privileged Identity Management, identity governance, workload identities, access reviews and phishing-resistant authentication.
• Support cyber security due diligence for acquisitions and provide clear assessments of material risks, remediation costs, integration priorities and required investment.

Required Experience:

• Relevant experience in cyber security, including substantial hands‑on experience in security architecture or security engineering roles.
• Demonstrable experience designing and implementing security controls in a complex Microsoft‑centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview.
• Practical experience securing generative AI, AI agents, data‑driven applications or comparable emerging technologies, with a strong understanding of AI‑specific attack techniques and mitigations.
• Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application and API security, secure software development and DevSecOps.
• Strong experience in incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation.
• Ability to automate security and assurance processes using technologies such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms.
• Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security and governance frameworks.

Cyber Security Architect & Engineering Lead