Security Architect

Addition; Warrington; Hybrid; GBP 77,000 - 104,000; Full time

Benefits offered by this job

Hybrid work

Bonus scheme

Matched pension 8.5%

26 days leave

Private health cover

Wellness allowance £500

Enhanced family leave

Flexible benefits

Employee assistance

Job summary

Addition is seeking an experienced Security Architect to lead security design across a major enterprise transformation. You will produce high-level and low-level designs, conduct risk assessments and define requirements grounded in industry frameworks.

The role balances security, cost, pace and quality while clearly communicating risks to stakeholders. The successful candidate will collaborate with architects, project managers and delivery teams to embed security across the project lifecycle,

Qualifications

• Experience providing security architecture and assurance to enterprise-scale programmes.
• Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK.
• Ability to translate risk assessments into structured, high-quality security requirements and designs.
• Broad technical knowledge across infrastructure, networks, systems, databases and applications.
• Knowledge of security logging, monitoring and vulnerability management.

Responsibilities

• Provide specialist security guidance throughout the project lifecycle and ensure security is embedded from the earliest design stages.
• Work with solution architects and multidisciplinary teams to develop secure, fit-for-purpose solutions.
• Support security triage and identify resources, timescales and expertise required.
• Conduct security risk assessments using recognised threat-modelling techniques.
• Produce high-level and low-level security designs for high-security workstreams.
• Define security requirements based on risk assessments, policies and patterns.
• Identify and communicate security risks and policy gaps to programme stakeholders.
• Undertake security design governance and update artefacts after review and assurance feedback.
• Develop scopes and test plans for functional security testing and penetration testing.

Skills

Threat modelling

Security architecture

Risk assessment

Security requirements

Cloud security

IAM & cryptography

Vulnerability management

Security testing planning

Communication skills

Tools

Jira

Confluence

Job description

We’re partnering with a large, highly regulated organisation to appoint an experienced Security Architect on a 12-month fixed-term contract.

This is an excellent opportunity to join a major enterprise transformation programme, taking responsibility for the design and secure delivery of complex technology solutions across multiple high-security workstreams.

You’ll work closely with architects, project managers, business analysts and technical delivery teams, ensuring security is embedded throughout the project lifecycle and that solutions remain aligned with organisational policies, recognised industry standards and wider business objectives.

The Opportunity

As Security Architect, you’ll provide specialist security expertise across a large and complex portfolio of technology change.

You’ll produce high-level and low-level security designs, conduct risk assessments and define security requirements based on identified threats, established patterns and recognised frameworks.

This is a highly collaborative role requiring someone who can balance security, cost, pace and quality while communicating technical risks clearly to stakeholders across both technology and the wider organisation.

Key Responsibilities

You’ll play a central role in supporting the secure delivery of enterprise-level solutions by:

• Providing specialist security guidance throughout the project lifecycle and ensuring security is considered from the earliest design stages.
• Working alongside Technology Solution Architects and multidisciplinary project teams to develop secure, fit-for-purpose solutions.
• Supporting the security triage of proposed solutions and identifying the resources, timescales and expertise required.
• Conducting security risk assessments using recognised threat-modelling techniques.
• Producing high-level and low-level security designs for high-security-impact workstreams.
• Defining security requirements based on risk-assessment findings, organisational policies and established security patterns.
• Identifying and communicating security risks, control gaps and policy non-compliance to programme stakeholders and service owners.
• Undertaking security design governance and updating design artefacts in response to review and assurance feedback.
• Developing scopes and test plans for functional security testing and penetration testing.
• Supporting internal and external security testing teams through the planning and delivery of assurance activities.
• Helping stakeholders reach informed and proportionate decisions regarding security risk.

About You

You’ll be an experienced Security Architect with a strong track record of supporting complex, enterprise-level projects and delivering secure solutions across varied technology environments.

You will also have:

• Experience providing security architecture and assurance support to enterprise-scale programmes.
• Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK.
• The ability to translate risk assessments into structured, high-quality security requirements and designs.
• Broad technical knowledge across infrastructure, networks, systems, databases and applications.
• A strong understanding of identity and access management, cryptography, endpoint security, network security and application security.
• Knowledge of security logging and monitoring, vulnerability management and wider security operations.
• Excellent knowledge of cloud security architecture and principles across IaaS, PaaS and SaaS environments.
• Experience developing security test plans and working with internal or external penetration-testing teams.
• Strong knowledge of recognised security standards and frameworks, including CIS, ISO 27000, PCI DSS and NIST.
• Experience identifying security control gaps and communicating the associated risks accurately to technical and non-technical stakeholders.
• Excellent written, presentation and communication skills.

Highly Desirable

It would be beneficial if you also have:

• Experience working within a complex release-management model as part of a technical delivery team.
• Familiarity with Agile delivery tools such as Jira and Confluence.
• Experience within gaming, gambling, iGaming or another highly regulated environment such as financial services or healthcare.
• Experience working across Agile, Scrum, Lean and Waterfall delivery methodologies.
• CISSP certification or an equivalent professional security qualification.

Why Apply?

This is an opportunity to take a leading role in the secure delivery of a major enterprise transformation programme within a complex, highly regulated environment.

In return, you’ll benefit from:

• A salary of £90,000.
• Hybrid working from Warrington.
• A company bonus scheme.
• Matched pension contributions of up to 8.5%.
• 26 days’ annual leave, additional wellbeing days and bank holidays.
• Private health cover and income protection.
• A £500 annual wellness allowance.
• Enhanced family-leave policies.
• Flexible benefits, including electric vehicle, dental and eye-care schemes.
• Employee assistance and discounted health-assessment programmes.
• Volunteering days and matched charitable funding.
• The opportunity to influence security across high-impact, business-critical technology workstreams.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.