Enterprise Security Architect — 12-Month Contract

Addition; Warrington; On-site; GBP 54,000 - 90,000; Full time

Job summary

Addition in Watford is seeking an experienced Security Architect for a 12-month fixed-term contract. You will design secure enterprise solutions and support a major transformation programme.

You’ll work with Technology Solution Architects, Project Managers and Business Analysts, producing high-level and low-level security designs, conducting risk assessments and ensuring compliance with security policies and architectural patterns.

Qualifications

• Proven experience providing security architecture support to enterprise-level projects and programmes.
• Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK.
• Experience producing structured, high-quality security requirements and designs that comply with relevant standards.
• Broad technical knowledge across infrastructure, networks, systems, databases and applications.
• A strong understanding of identity and access management, cryptography, endpoint security, network security and application security.
• Knowledge of security logging and monitoring, vulnerability management and wider security operations.
• Experience working with external parties to produce security test plans and support activities such as penetration testing.
• A strong understanding of cloud security architecture and principles across IaaS, PaaS and SaaS environments.
• Knowledge of industry standards and frameworks, including CIS, ISO 27000, PCI DSS and NIST.
• Experience identifying security-control gaps and communicating associated risks accurately to stakeholders.
• The ability to influence secure design decisions while considering commercial and delivery requirements.
• Excellent written, presentation and verbal communication skills.

Responsibilities

• Providing specialist security support as part of multidisciplinary project teams.
• Working with Technology Solution Architects to embed security into solutions early in the project lifecycle.
• Balancing security requirements with wider project considerations, including cost, pace and quality.
• Supporting the security triage of proposed solutions and helping projects identify appropriate resource requirements.
• Conducting security risk assessments using recognised threat-modelling techniques.
• Producing high-level and low-level security designs for high-security-impact workstreams.
• Defining security requirements based on risk assessments, security standards and established architectural patterns.
• Assessing and communicating security risks and areas of non-compliance to programme stakeholders and service owners.
• Supporting stakeholders in reaching appropriate and agreed risk positions.
• Undertaking security-design governance activities and updating design artefacts in response to feedback.
• Producing test plans and scopes for functional security testing and penetration testing.
• Supporting internal and external security-testing resources throughout the testing process.
• Providing security input from initial technical design through to the successful delivery of solutions into production.

Skills

Security architecture

Threat modelling

Risk assessment

Communication

Identity and access management

Cryptography

Cloud security

Security design

Security governance

Security operations

Education

CISSP certification

Tools

Jira

Confluence

Job description

Addition in Watford is seeking an experienced Security Architect for a 12-month fixed-term contract. You will design secure enterprise solutions and support a major transformation programme.

You’ll work with Technology Solution Architects, Project Managers and Business Analysts, producing high-level and low-level security designs, conducting risk assessments and ensuring compliance with security policies and architectural patterns.