Security Architect

CMS; Bristol; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A global defence tech organisation based in Bristol is seeking a Security Architect to design and oversee security infrastructure. Candidates will be involved in integrating security controls into product development while ensuring compliance with industry standards. Applicants should have a background in cybersecurity and experience in risk management methodologies. This role offers hybrid working arrangements and excellent benefits.

Qualifications

• Experience in incident response and remediation.
• Proficiency in security threat modeling and risk assessments.
• Must be eligible for SC security clearance.

Responsibilities

• Identify security requirements and integrate controls into product development.
• Conduct risk assessments, threat modeling, and vulnerability analysis.
• Collaborate with development teams to ensure security best practices.

Skills

Knowledge of security frameworks (ISO, NIST, OWASP)

Experience with risk management methodologies

Strong analytical and problem-solving skills

Knowledge of secure development practices

Ability to communicate security risks

Education

Degree in Cybersecurity, Computer Science, or related field

Certifications (CISSP, CISM, OSCP, GIAC)

Job description

Job Details Security ArchitectSalary £k + Benefits Based Bristol with Hybrid WorkingThis is an exceptional opportunity to work for our client, a global defence tech organisation as Security Architect. In this exciting role the successful candidate will be responsible for designing, implementing, and overseeing security infrastructure to protect products and systems from security threats. This role ensures security controls are integrated throughout the software development lifecycle, performs risk assessments, and collaborates with stakeholders to mitigate vulnerabilities. The Security Architect will also contribute to security compliance and best practices, ensuring products meet regulatory and industry standards.Key Responsibilities:Identify security requirements and integrate controls into product development.Conduct risk assessments, threat modeling, and vulnerability analysis.Develop and implement risk management strategies using security frameworks.Collaborate with development teams to ensure security best practices and secure-by-design principles.Identify and mitigate security risks in solution architectures.Create security documentation (, RMADS, Security Assurance Documents).Support incident response and remediation efforts for security breaches.Provide security guidance and training to teams across the organization.Key Skills & Experience:Strong knowledge of security frameworks (ISO , NIST -/, OWASP).Experience with risk management methodologies and compliance with MOD and HMG security standards (JSP, Def Stan -/).Proficiency in security threat modeling and risk assessments.Knowledge of secure development practices, penetration testing, and vulnerability assessments.Ability to communicate security risks and strategies to technical and non-technical stakeholders.Experience in incident response and remediation.Strong analytical and problem-solving skills.Qualifications & Requirements:Degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).Certifications such as CISSP, CISM, OSCP, GIAC (preferred but not mandatory).Must be eligible for SC security clearance.Experience working in defense, government, or high-security environments is a plus.Knowledge of cloud security architectures (AWS, Azure, GCP) is advantageous.