JDT Security Assurance Architect - secure on-site Hampshire

DXC Technology Company; Farnborough; Presencial; GBP 70 000 - 110 000; Tempo integral

Resumo da oferta

DXC Technology is seeking a Security Architect (Joint Design Team) in Farnborough, UK, permanent full-time. The role leads security architecture, design authority and assurance for defence and aerospace IT programmes, defining secure solutions and patterns, and ensuring compliance with JSP 440 and other security standards.

The successful candidate will work with the Client Delivery Team and risk owners to drive Secure by Design principles, manage threat models, and oversee multi-classification

Responsabilidades

• Act as security design authority, defining the security architecture, design patterns and security controls for proposed IT solutions against Client security requirements

Conhecimentos

Security architecture

Threat modelling

Zero Trust

Security design authority

Descrição da oferta de emprego

Job Description

Security Architect (Joint Design Team)

Location: Farnborough, Hampshire, UK

Employment Type: Permanent, Full-Time

Travel: Up to 10% UK-wide and customer sites

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

About DXC Technology

DXC Technology is a Fortune 500 company delivering mission-critical IT solutions globally. Our Aerospace and Defence Hub in Farnborough works on sensitive defence programmes requiring highest security standards and rigorous assurance practices.

About the Role

The Security Architect (Joint Design Team) leads security architecture, design authority and assurance for defence and aerospace IT programmes. Acting as the security design authority within Joint Design Teams, you will define secure solution architectures and security patterns for proposed IT solutions, ensure solutions meet Secure by Design and JSP 440 (The Defence Manual of Security) requirements from the outset, identify security risks, and specify security controls. Working alongside the Client Delivery Team, Client risk owners and other suppliers, this role requires strong security knowledge, architectural judgement and the ability to lead and influence technical architects and Client teams.

Key Responsibilities

Security Architecture, Design & Assurance

Act as security design authority, defining the security architecture, design patterns and security controls for proposed IT solutions against Client security requirements

Develop and validate threat models and the security assumptions underlying IT designs

Design security architectures for multi-classification environments (OFFICIAL, SECRET and above), including domain separation, cross-domain solutions and browse-down patterns

Apply Zero Trust principles to secure on-premises, hybrid and cloud defence hosting designs

Specify cryptographic architecture and key management approaches, including the use of National Cyber Security Centre (NCSC)-approved cryptographic products and the secure handling of cryptographic material

Define emissions security (TEMPEST) and physical separation requirements for SECRET and above environments

Client Compliance & Standards Alignment

Ensure IT designs are architected to comply with JSP 440 (The Defence Manual of Security), Client Secure by Design, Government Security Classifications Policy, Classification Guides, Def Stan 05-138 and NCSC guidance

Embed UK export controls (Export Control Order 2008) and, where applicable, US International Traffic in Arms Regulations (ITAR) requirements into solution designs

Embed supply-chain security requirements into solution designs, including supplier assurance, hardware and software provenance, and flow-down of Def Stan 05-138 obligations

Design data handling and classification models, and address personnel security and vetting requirements within the design

Joint Design Team Leadership

Lead security input to Joint Design Team meetings and architecture workshops, shaping infrastructure, network and application architecture decisions

Review proposed solutions from a security perspective, challenge assumptions and design secure alternatives that embed Secure by Design principles early in the design phase

Support security decision-making through architectural options analysis

Integrate security across multi-supplier designs, coordinating with the Client Delivery Team, risk owners and other suppliers

Architecture Documentation & Reporting

Produce security architecture and design documentation, including security specifications, control specifications and implementation guidance

Create security requirements matrices and compliance traceability matrices

Maintain the security architecture and its documentation through life, assessing the security impact of design changes after go-live

Risk-Driven Design & Mitigation Planning

Conduct security risk assessments and use the outputs to prioritise architectural controls and inform design trade-offs

Identify residual security risks, design appropriate mitigation strategies and track mitigation through implementation

Lead risk management activities and produce Secure by Design evidence to support Client risk owners in accepting residual risk

Security Assurance & Validation

Define security test plans and assurance approaches that demonstrate security controls operate as designed

Validate implementation of security controls against the approved security architecture

Lead the security architecture contribution to Secure by Design assurance activities

Stakeholder Engagement & Influence

Lead security design discussions with Client security teams, communicating architecture decisio