Security Architect

Addition; Warrington; On-site; GBP 54,000 - 90,000; Full time

Job summary

Addition in Watford is seeking an experienced Security Architect for a 12-month fixed-term contract. You will design secure enterprise solutions and support a major transformation programme.

You’ll work with Technology Solution Architects, Project Managers and Business Analysts, producing high-level and low-level security designs, conducting risk assessments and ensuring compliance with security policies and architectural patterns.

Qualifications

• Proven experience providing security architecture support to enterprise-level projects and programmes.
• Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK.
• Experience producing structured, high-quality security requirements and designs that comply with relevant standards.
• Broad technical knowledge across infrastructure, networks, systems, databases and applications.
• A strong understanding of identity and access management, cryptography, endpoint security, network security and application security.
• Knowledge of security logging and monitoring, vulnerability management and wider security operations.
• Experience working with external parties to produce security test plans and support activities such as penetration testing.
• A strong understanding of cloud security architecture and principles across IaaS, PaaS and SaaS environments.
• Knowledge of industry standards and frameworks, including CIS, ISO 27000, PCI DSS and NIST.
• Experience identifying security-control gaps and communicating associated risks accurately to stakeholders.
• The ability to influence secure design decisions while considering commercial and delivery requirements.
• Excellent written, presentation and verbal communication skills.

Responsibilities

• Providing specialist security support as part of multidisciplinary project teams.
• Working with Technology Solution Architects to embed security into solutions early in the project lifecycle.
• Balancing security requirements with wider project considerations, including cost, pace and quality.
• Supporting the security triage of proposed solutions and helping projects identify appropriate resource requirements.
• Conducting security risk assessments using recognised threat-modelling techniques.
• Producing high-level and low-level security designs for high-security-impact workstreams.
• Defining security requirements based on risk assessments, security standards and established architectural patterns.
• Assessing and communicating security risks and areas of non-compliance to programme stakeholders and service owners.
• Supporting stakeholders in reaching appropriate and agreed risk positions.
• Undertaking security-design governance activities and updating design artefacts in response to feedback.
• Producing test plans and scopes for functional security testing and penetration testing.
• Supporting internal and external security-testing resources throughout the testing process.
• Providing security input from initial technical design through to the successful delivery of solutions into production.

Skills

Security architecture

Threat modelling

Risk assessment

Communication

Identity and access management

Cryptography

Cloud security

Security design

Security governance

Security operations

Education

CISSP certification

Tools

Jira

Confluence

Job description

12-Month Fixed-Term Contract | Up to £90,000

Location: Watford

We’re partnering with a high-profile, regulated consumer organisation to appoint an experienced Security Architect on a 12-month fixed-term contract.

This is an excellent opportunity for a security professional with strong enterprise architecture experience to support a large-scale transformation programme involving multiple high-security-impact workstreams.

Working within the Enterprise Security team, you’ll produce high-level and low-level security designs, conduct risk assessments and ensure solutions comply with relevant security policies, standards and architectural patterns.

The Opportunity

As Security Architect, you’ll help ensure security is embedded into technology solutions from the earliest stages of the project lifecycle.

You’ll work closely with Technology Solution Architects, Project Managers, Business Analysts and other key stakeholders, supporting projects from the production of technical design documentation through to the secure delivery of solutions into production.

This is a highly collaborative role requiring strong technical knowledge, structured security-design experience and the ability to communicate complex risks clearly to both technical and non-technical stakeholders.

Key Responsibilities

You’ll support the design and delivery of secure enterprise technology solutions by:

• Providing specialist security support as part of multidisciplinary project teams.
• Working with Technology Solution Architects to embed security into solutions early in the project lifecycle.
• Balancing security requirements with wider project considerations, including cost, pace and quality.
• Supporting the security triage of proposed solutions and helping projects identify appropriate resource requirements.
• Conducting security risk assessments using recognised threat-modelling techniques.
• Producing high-level and low-level security designs for high-security-impact workstreams.
• Defining security requirements based on risk assessments, security standards and established architectural patterns.
• Assessing and communicating security risks and areas of non-compliance to programme stakeholders and service owners.
• Supporting stakeholders in reaching appropriate and agreed risk positions.
• Undertaking security-design governance activities and updating design artefacts in response to feedback.
• Producing test plans and scopes for functional security testing and penetration testing.
• Supporting internal and external security-testing resources throughout the testing process.
• Providing security input from initial technical design through to the successful delivery of solutions into production.

About You

You’ll be an experienced Security Architect with a strong background supporting enterprise-level projects and designing secure solutions across complex technology environments.

You will also have:

• Proven experience providing security architecture support to enterprise-level projects and programmes.
• Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK.
• Experience producing structured, high-quality security requirements and designs that comply with relevant standards.
• Broad technical knowledge across infrastructure, networks, systems, databases and applications.
• A strong understanding of identity and access management, cryptography, endpoint security, network security and application security.
• Knowledge of security logging and monitoring, vulnerability management and wider security operations.
• Experience working with external parties to produce security test plans and support activities such as penetration testing.
• A strong understanding of cloud security architecture and principles across IaaS, PaaS and SaaS environments.
• Knowledge of industry standards and frameworks, including CIS, ISO 27000, PCI DSS and NIST.
• Experience identifying security-control gaps and communicating associated risks accurately to stakeholders.
• The ability to influence secure design decisions while considering commercial and delivery requirements.
• Excellent written, presentation and verbal communication skills.

It would also be advantageous to have:

• Experience working within a complex release-management model or technical delivery environment.
• Experience using Agile tools such as Jira and Confluence.
• Previous experience within gaming, gambling, online casino, sports betting or iGaming environments.
• Experience working within another highly regulated sector, such as financial services or healthcare.
• Knowledge of Agile, Scrum, Lean and Waterfall delivery methodologies.
• CISSP certification or another relevant security qualification.

Why Apply?

This is a fantastic opportunity to influence the security of strategically important technology solutions within a complex and highly regulated organisation.

In return, you’ll benefit from:

• A salary of up to £90,000.
• A 12-month fixed-term contract supporting a major transformation programme.
• The opportunity to work across multiple high-security-impact workstreams.
• Significant exposure to enterprise security architecture, cloud technology and complex solution design.
• Close collaboration with architecture, project delivery, business analysis and security-testing teams.
• The opportunity to influence security decisions from initial design through to production.
• A company bonus scheme.
• Matched pension contributions of up to 8.5%.
• 26 days of annual leave, additional wellbeing days and bank holidays.
• Private medical cover and income protection.
• Enhanced family-leave policies.
• A £500 wellness allowance.
• Access to flexible benefits, financial support services and an Employee Assistance Programme.
• Volunteering days and matched funding opportunities.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

By applying you are confirming you are happy to be added to the Addition Solutions mailing list regarding future suitable positions. You can opt out of this at any time simply by contacting one of our consultants.