Cyber Security Engineer/Architect

Bonhill Partners Ltd; Greater London; Hybrid; GBP 110,000 - 150,000; Full time

Job summary

Bonhill Partners Ltd in London seeks an experienced security architect to design and implement enterprise security architectures aligned with business objectives and industry standards. The role focuses on Zero Trust, ZTNA, IAM and cloud security across Azure/AWS/GCP.

You will lead security architecture reviews, perform threat modelling and risk assessments, and integrate security across SDLC and DevSecOps teamwork to strengthen cyber resilience.

Qualifications

• Design and implement enterprise security architectures aligned with business objectives and industry standards.
• Experience across Azure, AWS, and/or GCP for cloud security implementations.
• Lead security architecture reviews and translate risk into practical controls.
• Embed security across the SDLC and DevSecOps lifecycle.

Responsibilities

• Design, implement, and maintain enterprise security architectures.
• Lead threat modelling, risk assessments, and vulnerability management.
• Implement and integrate cyber security technologies including EDR/XDR, SIEM/SOAR, firewalls, DLP and monitoring.
• Drive security automation via scripting, IaC, and CI/CD practices.
• Ensure alignment with ISO 27001, NIST CSF, CIS Controls and Cyber Essentials Plus.

Skills

Zero Trust

ZTNA

IAM

Cloud Security

Threat Modelling

SIEM/SOAR

DevSecOps

Compliance

Job description

Location: London, Bank - 3 days in office.

Details: Initial 6 month contract, with guaranteed conversion to perm within that period.

Perm salary: up to £120k base + bonus (VP Level)

Initial contract rate: TBC

Requirements:

• Design, implement, and maintain enterprise security architectures aligned with business objectives, Zero Trust principles, secure-by-design practices, and industry standards.
• Design and implement Zero Trust and ZTNA solutions, including least privilege, continuous authentication and authorisation, device posture, micro-segmentation, policy-based access, and secure remote access.
• Engineer and manage Identity and Access Management (IAM) capabilities, including RBAC/ABAC, SSO, federation, MFA, conditional access, PAM, identity governance, access reviews, and Joiner-Mover-Leaver processes.
• Develop and implement security solutions across cloud, network, endpoint, identity, application, and data domains, with experience across Azure, AWS, and/or GCP.
• Lead security architecture reviews, threat modelling, risk assessments, vulnerability management, and secure design reviews, translating risks into practical technical controls.
• Implement and integrate cyber security technologies including EDR/XDR, SIEM/SOAR, firewalls, network security, DLP, security monitoring, and threat detection.
• Embed security throughout the SDLC and DevSecOps lifecycle, working with engineering and development teams on secure coding, CI/CD security, secrets management, and application security.
• Support incident response, threat hunting, security investigations, and remediation, using lessons learned and threat intelligence to continuously improve security controls.
• Drive security automation and engineering using scripting, APIs, Infrastructure as Code (IaC), and CI/CD technologies, while evaluating emerging technologies and supporting digital transformation.
• Ensure alignment with relevant regulatory and security frameworks, including ISO 27001, NIST CSF, NIST Zero Trust Architecture, CIS Controls, Cyber Essentials Plus, and applicable UK/EU requirements, while providing technical leadership and mentoring to engineering teams.