DV Cleared Security Architect — Air-Gapped Defence

CBSbutler Holdings Limited trading as CBSbutler; Corsham; On-site; GBP 92,000 - 102,000; Full time

Job summary

CBSbutler is seeking an experienced Security Architect to support design, build and assurance of secure Backend Platform and endpoint protection in air-gapped environments. You will apply MOD policies and NIST CSF across infrastructure and end-user endpoints, engaging stakeholders at customer sites.

The role focuses on delivering secure, compliant solutions and security controls, with emphasis on vulnerability management, documentation, and accreditation activities in a high-assurance setting.

Qualifications

• Proven Security Architect or senior SME experience in Defence or regulated environments.
• Strong knowledge of endpoint security, EDR, vulnerability management, and platform hardening.
• Experience designing secure solutions for offline/air-gapped networks.
• Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and NIST CSF.
• Experience supporting security assurance, risk management, and accreditation activities.
• Strong stakeholder engagement and technical documentation skills.

Responsibilities

• Design and implement endpoint security solutions, including Antivirus/EDR, vulnerability management, and platform security controls.
• Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer.
• Ensure compliance with MOD, NCSC, JSP and NIST security standards.
• Develop vulnerability management processes, security assurance activities, and accreditation documentation.
• Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope.
• Collaborate with infrastructure and security teams to deliver secure, compliant solutions.

Skills

Endpoint security

EDR

Vulnerability mgmt

Air-gapped networks

MOD policies

NIST CSF

NCSC guidance

JSP 440/604

Documentation

Stakeholder engagement

Job description

CBSbutler is seeking an experienced Security Architect to support design, build and assurance of secure Backend Platform and endpoint protection in air-gapped environments. You will apply MOD policies and NIST CSF across infrastructure and end-user endpoints, engaging stakeholders at customer sites.

The role focuses on delivering secure, compliant solutions and security controls, with emphasis on vulnerability management, documentation, and accreditation activities in a high-assurance setting.