Security Architect - DV Cleared

CBSbutler Holdings Limited trading as CBSbutler; Corsham; On-site; GBP 92,000 - 102,000; Full time

Job summary

CBSbutler is seeking an experienced Security Architect to support design, build and assurance of secure Backend Platform and endpoint protection in air-gapped environments. You will apply MOD policies and NIST CSF across infrastructure and end-user endpoints, engaging stakeholders at customer sites.

The role focuses on delivering secure, compliant solutions and security controls, with emphasis on vulnerability management, documentation, and accreditation activities in a high-assurance setting.

Qualifications

• Proven Security Architect or senior SME experience in Defence or regulated environments.
• Strong knowledge of endpoint security, EDR, vulnerability management, and platform hardening.
• Experience designing secure solutions for offline/air-gapped networks.
• Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and NIST CSF.
• Experience supporting security assurance, risk management, and accreditation activities.
• Strong stakeholder engagement and technical documentation skills.

Responsibilities

• Design and implement endpoint security solutions, including Antivirus/EDR, vulnerability management, and platform security controls.
• Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer.
• Ensure compliance with MOD, NCSC, JSP and NIST security standards.
• Develop vulnerability management processes, security assurance activities, and accreditation documentation.
• Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope.
• Collaborate with infrastructure and security teams to deliver secure, compliant solutions.

Skills

Endpoint security

EDR

Vulnerability mgmt

Air-gapped networks

MOD policies

NIST CSF

NCSC guidance

JSP 440/604

Documentation

Stakeholder engagement

Job description

Security Architect

• + DV Cleared position
• + Initial 7 month contract but should be long term
• + £500 to £555 per day Inside IR35
• + Corsham or Erskine based

An experienced Security Architect and Subject Matter Expert (SME) is required to support the design, build, and assurance of Backend Platform and endpoint protection and vulnerability management capabilities within secure, offline (air-gapped) environments.

The Architect must apply the NIST Cybersecurity Framework and MoD security policies to the backend platform, while supporting the Security and Infrastructure teams in designing and implementing security controls across the infrastructure and end-user endpoints.

The role will provide specialist expertise in the delivery of Security controls, AntiVirus and Vulnerability Management platforms in support of a UK Government secure account. The successful candidate will operate within high-assurance environments, ensuring compliance with MOD security policies and national cyber security standards, while engaging directly with stakeholders across customer sites.

Key Responsibilities

• Design and implement endpoint security solutions, including AntiVirus/EDR, vulnerability management, and platform security controls.
• Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer.
• Ensure compliance with MOD, NCSC, JSP and NIST security standards.
• Develop vulnerability management processes, security assurance activities, and accreditation documentation.
• Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope.
• Collaborate with infrastructure and security teams to deliver secure, compliant solutions.

Skills & Experience

• Proven Security Architect or senior Security SME experience within Defence or other regulated environments.
• Strong knowledge of endpoint security, EDR, vulnerability management, and platform hardening.
• Experience designing secure solutions for offline/air-gapped networks.
• Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework.
• Experience supporting security assurance, risk management, and accreditation activities.
• Strong stakeholder engagement and technical documentation skills.

Desirable

• Defence or Aerospace sector experience.
• Experience working within classified or high-assurance environments.
• Incident response and secure network experience