Security Architect

SSR General & Management; Gloucester; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

A global defence tech organisation is seeking a Security Architect to design and oversee security infrastructure. The successful candidate will manage security controls, perform risk assessments, and collaborate with development teams. Candidates should have a degree in Cybersecurity or a related field and be eligible for SC security clearance. This role offers a salary of 85k plus benefits and hybrid working options.

Qualifications

• Degree in relevant field or equivalent experience is preferred.
• Certifications such as CISSP, CISM, OSCP, GIAC are a plus.
• Must be eligible for SC security clearance.

Responsibilities

• Identify security requirements and integrate controls into product development.
• Conduct risk assessments, threat modeling, and vulnerability analysis.
• Collaborate with development teams to ensure security best practices.

Skills

Strong knowledge of security frameworks (ISO 27001, NIST 800-30/53, OWASP)

Experience with risk management methodologies

Proficiency in security threat modeling and risk assessments

Knowledge of secure development practices

Ability to communicate security risks and strategies

Experience in incident response and remediation

Strong analytical and problem-solving skills

Education

Degree in Cybersecurity, Computer Science, or related field

Job description

Overview

Security Architect — Salary 85k + Benefits | Based Bristol with Hybrid Working

This is an exceptional opportunity to work for our client, a global defence tech organisation as Security Architect. In this exciting role the successful candidate will be responsible for designing, implementing, and overseeing security infrastructure to protect products and systems from security threats. This role ensures security controls are integrated throughout the software development lifecycle, performs risk assessments, and collaborates with stakeholders to mitigate vulnerabilities. The Security Architect will also contribute to security compliance and best practices, ensuring products meet regulatory and industry standards.

Key Responsibilities

• Identify security requirements and integrate controls into product development.
• Conduct risk assessments, threat modeling, and vulnerability analysis.
• Develop and implement risk management strategies using security frameworks.
• Collaborate with development teams to ensure security best practices and secure-by-design principles.
• Identify and mitigate security risks in solution architectures.
• Create security documentation (e.g., RMADS, Security Assurance Documents).
• Support incident response and remediation efforts for security breaches.
• Provide security guidance and training to teams across the organization.

Key Skills & Experience

• Strong knowledge of security frameworks (ISO 27001, NIST 800-30/53, OWASP).
• Experience with risk management methodologies and compliance with MOD and HMG security standards (JSP, Def Stan 05-138/139).
• Proficiency in security threat modeling and risk assessments.
• Knowledge of secure development practices, penetration testing, and vulnerability assessments.
• Ability to communicate security risks and strategies to technical and non-technical stakeholders.
• Experience in incident response and remediation.
• Strong analytical and problem-solving skills.

Qualifications & Requirements

• Degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).
• Certifications such as CISSP, CISM, OSCP, GIAC (preferred but not mandatory).
• Must be eligible for SC security clearance.
• Experience working in defense, government, or high-security environments is a plus.
• Knowledge of cloud security architectures (AWS, Azure, GCP) is advantageous.