DV Cleared Security Architect – Air-Gapped Defence Platform

CBS Butler; Corsham; On-site; GBP 92,000 - 102,000; Full time

Job summary

CBS Butler is seeking a Security Architect to design and secure backend platforms and endpoints in air-gapped environments for a UK government account.

The role requires expertise in endpoint security, vulnerability management, and adherence to MOD/NCSC standards. You will work with Infra and Security teams to deliver compliant security controls and documentation in a high-assurance setting.

Qualifications

• Proven Security Architect or senior SME experience in Defence or regulated environments.
• Strong knowledge of endpoint security, EDR, vulnerability management and platform hardening.
• Experience designing secure solutions for offline/air-gapped networks.
• Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework.
• Experience supporting security assurance, risk management and accreditation activities.
• Strong stakeholder engagement and documentation skills.

Responsibilities

• Design and implement endpoint security solutions, including AntiVirus/EDR, vulnerability management, and platform security controls.
• Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer.
• Ensure compliance with MOD, NCSC, JSP 440/604, and NIST security standards.
• Develop vulnerability management processes, security assurance activities, and accreditation documentation.
• Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope.
• Collaborate with infrastructure and security teams to deliver secure, compliant solutions.

Skills

Security Architecture

Endpoint security

EDR

Vulnerability management

Offline/air-gapped design

MOD security policies

NIST CSF

Stakeholder engagement

Technical documentation

Tools

HLDs/LLDs

Job description

CBS Butler is seeking a Security Architect to design and secure backend platforms and endpoints in air-gapped environments for a UK government account.

The role requires expertise in endpoint security, vulnerability management, and adherence to MOD/NCSC standards. You will work with Infra and Security teams to deliver compliant security controls and documentation in a high-assurance setting.