Managing Security Architect

Sopra Steria Limited; Hemel Hempstead; On-site; GBP 70,000 - 90,000; Full time

Job summary

A technology consulting firm in Hemel Hempstead is looking for a Managing Security Architect to engage with clients and identify their detection needs. The role involves facilitating workshops, translating detection priorities into structured requirements, and collaborating with engineers to ensure alignment with service standards. Candidates should have experience in a client-facing role within cybersecurity.

Responsibilities

• Engage with clients to understand their business context and detection priorities.
• Facilitate workshops to identify detection use cases.
• Develop user stories and acceptance criteria for detection development.
• Collaborate with engineers to ensure use cases are technically feasible.
• Support onboarding of clients by defining detection requirements.

Job description

Overview

Managing Security Architect. The Service Architect operates within the Service Pillar of the SOC and is responsible for client engagement, service design, and use case discovery. The role combines elements of client success management and business analysis, with a focus on helping clients identify their detection needs and framing them as structured, measurable questions. This role supports both pre-sales and in-life service phases, working closely with clients, analysts, and engineers to ensure that detection capabilities are aligned with business risks, regulatory requirements, and threat landscapes. This is not to produce but to interpret client documentation and needs.

Role Purpose

To ensure that SOC services are designed and delivered in a way that meets client needs, by identifying detection use cases provided by the client through workshops, translating them into structured requirements, and supporting their implementation across the SOC.

Key Responsibilities

• Engage with clients to understand (but not create) their business context, risk profile, and detection priorities.
• Facilitate workshops and discovery sessions to identify detection use cases and security questions.
• Translate detection needs into structured, measurable use cases - framed as data science questions where appropriate.
• Develop user stories, acceptance criteria, and supporting documentation to guide detection content development.
• Collaborate with Detection Content Engineers and Security Engineers to ensure use cases are technically feasible and supported by available data.
• Support onboarding of new clients by defining detection requirements and aligning them with SOC capabilities.
• Maintain a catalogue of client-specific use cases, mapped to MITRE ATT&CK and other relevant frameworks.
• Act as a point of contact for client feedback, service improvement discussions, and roadmap planning.
• Ensure alignment with CREST standards and contribute to service maturity uplift initiatives.
• Undertake additional tasks or responsibilities as directed by the Head of SOC, Managing Security Architect or Design Authority.