Security Architect

SSR General & Management; Kendleshire; Hybrid; GBP 70,000 - 85,000; Full time

Job summary

A leading technology firm in the UK is seeking a Security Architect to design and implement security infrastructure to safeguard products and systems. This role involves conducting risk assessments and ensuring compliance with industry standards. Candidates should possess a degree in Cybersecurity or a related field, with knowledge of security frameworks. The position offers hybrid working and a competitive salary.

Qualifications

• Strong knowledge of security frameworks.
• Experience with risk management methodologies.
• Ability to communicate security risks effectively.

Responsibilities

• Identify security requirements and integrate controls into product development.
• Conduct risk assessments, threat modeling, and vulnerability analysis.
• Develop and implement risk management strategies.

Skills

Security frameworks knowledge (ISO 27001, NIST 800-30/53, OWASP)

Risk management methodologies

Security threat modeling

Penetration testing

Analytical and problem-solving skills

Education

Degree in Cybersecurity, Computer Science, or equivalent

Job description

Overview

Security Architect — Salary £85k + Benefits. Based in Bristol with Hybrid Working. This is an exceptional opportunity to work for our client, a global defence tech organisation. The successful candidate will be responsible for designing, implementing, and overseeing security infrastructure to protect products and systems from security threats. This role ensures security controls are integrated throughout the software development lifecycle, performs risk assessments, and collaborates with stakeholders to mitigate vulnerabilities. The Security Architect will also contribute to security compliance and best practices, ensuring products meet regulatory and industry standards.

Key Responsibilities

• Identify security requirements and integrate controls into product development.
• Conduct risk assessments, threat modeling, and vulnerability analysis.
• Develop and implement risk management strategies using security frameworks.
• Collaborate with development teams to ensure security best practices and secure-by-design principles.
• Identify and mitigate security risks in solution architectures.
• Create security documentation (e.g., RMADS, Security Assurance Documents).
• Support incident response and remediation efforts for security breaches.
• Provide security guidance and training to teams across the organization.

Key Skills & Experience

• Strong knowledge of security frameworks (ISO 27001, NIST 800-30/53, OWASP).
• Experience with risk management methodologies and compliance with MOD and HMG security standards (JSP, Def Stan 05-138/139).
• Proficiency in security threat modeling and risk assessments.
• Knowledge of secure development practices, penetration testing, and vulnerability assessments.
• Ability to communicate security risks and strategies to technical and non-technical stakeholders.
• Experience in incident response and remediation.
• Strong analytical and problem-solving skills.

Qualifications & Requirements

• Degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).
• Certifications such as CISSP, CISM, OSCP, GIAC (preferred but not mandatory).
• Must be eligible for SC security clearance.
• Experience working in defense, government, or high-security environments is a plus.
• Knowledge of cloud security architectures (AWS, Azure, GCP) is advantageous.