Security Architect

Broster Buchanan; West of England; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Broster Buchanan is seeking a Security Architect to join a UK defence-focused team in Bristol on a hybrid basis. You will design, implement and maintain security architectures for critical ICT projects, safeguarding data confidentiality and integrity across complex environments.

Requirements include 5 years as a Security Architect in UK Defence, experience with MOD standards (JSP440, JSP453, Secure by Design), and frameworks such as NIST and ISO 27001.

Qualifications

• Degree or equivalent experience in cyber security or related field.
• 5 years' experience as a Security Architect within UK Defence.
• Strong understanding of security architectures and system design.
• Experience with modern security controls and risk-based design.
• Excellent communication with senior stakeholders.

Responsibilities

• Designing Security Architecture and overseeing security across ICT capabilities for the client.
• Aligning security architectures with client strategy and technology goals.
• Identifying threats, assessing vulnerabilities and conducting risk analyses (ITHC).
• Researching, evaluating and recommending security technologies and solutions.
• Developing, implementing and maintaining security policies, standards and procedures.
• Leading incident response planning and coordinating breach investigations.
• Communicating complex security concepts to technical and non-technical stakeholders.

Skills

Security architecture design

Threat & vulnerability management

Stakeholder engagement

Technical documentation

UK Defence experience

Security standards knowledge

Analytical thinking

Education

Degree in Cyber Security or related

Tools

Firewalls

IDS/IPS

Encryption

EDR

SIEM

SOAR

Job description

• Security Architect
• Defence, Critical National Infrastructure, Nuclear
• UK Sole National

Security Architect
Bristol (Hybrid)
Permanent Opportunity

To apply for this role you must be a UK sole national.

Role

We are working with a long standing global client who have an exciting opportunity for a Security Architect to join their growing team of IT professionals to work on a range of projects for their diverse client portfolio that covers Critical National Infrastructure, National Security, Defence and Nuclear market sectors.

You will join a team supporting ICT system design activities for a UK defence project. You will play an integral role in safeguarding the integrity and confidentiality of the client's data and systems, responsible for designing, implementing, and maintaining security architectures that protect against a wide range of cyber threats.

Key Responsibilities:

• Designing Security Architecture - the core responsibility, involving the creation and oversight of robust security architectures for the ICT capabilities they are designing for the client. This includes planning, designing, building, and maintaining the overall security framework in line with SbD.
• Strategic Alignment. Ensuring that security architectures align with their client's overall business strategy and technology goals. Translate business needs into security requirements.
• Threat and Vulnerability Management. Identifying, assessing, and communicating current and emerging security threats and vulnerabilities. This involves performing or supervising risk analyses and security assessments (including ITHC).
• Security Solution Design and Evaluation. Researching, evaluating, and recommending security technologies, tools (e.g., firewalls, VPNs, IDS/IPS, EDR, SIEM, SOAR), and solutions to mitigate identified threats and address security needs.
• Policy and Procedure Development: Defining, implementing, and maintaining corporate security policies, standards, and procedures to ensure compliance with industry regulations, legal requirements (e.g., GDPR, HIPAA), and best practices.
• Incident Response and Management: Playing a key role in developing incident response plans and coordinating efforts to detect, analyse, and respond to security incidents and breaches.
• Stakeholder Communication and Collaboration: Effectively communicating complex security concepts, risks, and recommendations to diverse technical and non-technical stakeholders, including senior management.

Skills

• Degree qualified in Cyber Security, Computer Science, Engineering, or related discipline (or equivalent experience).
• Excellent communication and stakeholder engagement skills, with the ability to influence at senior levels.
• Strong analytical skills with the ability to break down complex security challenges.
• Ability to produce high-quality technical documentation for both technical and non-technical audiences.
• 5 years' experience as a Security Architect within UK Defence.
• Deep understanding of computer systems, networking, and cybersecurity principles. Strong analytical and problem-solving skills, as well as the ability to think critically and creatively to identify and address potential security vulnerabilities.
• Knowledge of cybersecurity standards and best practices.
• Ability to design and implement security architectures.
• Ability to stay up-to-date with the latest cybersecurity threats and trends.
• Hands on experience with security technologies such as firewalls, intrusion detection systems, encryption etc.

Standards & Frameworks:

• Experience of MOD security standards and principles (e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001).
• Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) desirable .