Security Architect in Wiltshire

Energy Jobline ZR; Salisbury; Hybrid; GBP 87.000 - 118.000; Vollzeit

Zusammenfassung

Energy Jobline ZR is seeking a skilled DV cleared Security Architect to design and deliver secure backend platform and endpoint security for a UK Government environment. You will work across offline and air-gapped setups, applying NIST CSF principles and MOD policies while collaborating with infrastructure and security teams.

The role requires hands-on and architectural expertise in endpoint protection, EDR, vulnerability management and secure environments.

Qualifikationen

• Proven experience in secure, regulated or high-assurance environments.
• Design and implement platform security controls including endpoints, AV/EDR and vulnerability management.
• Experience with offline/air-gapped environments and secure data transfer.

Aufgaben

• Lead the architecture, design and implementation of endpoint and platform security solutions.
• Design security controls aligned with MOD policies, NIST CSF and NCSC guidance.
• Develop vulnerability management capabilities including scanning, prioritisation, remediation and reporting.
• Create security solutions for offline environments including controlled updates and signatures.
• Establish secure data transfer and threat intel ingestion in disconnected environments.
• Define vulnerability scanning regimes and remediation processes.
• Advise on endpoint hardening, firewall rules, ports and protocols.
• Produce penetration testing scopes for back end platforms and endpoints.
• Maintain security architecture documentation and SOPs.

Kenntnisse

Security Architect

Endpoint security

Vulnerability management

Air-gapped environments

MOD policies

NIST CSF

Threat intelligence

Jobbeschreibung

Job Description

Contract Security Architect (Platform security)

£555 p/d Inside IR35

Hybrid remote in Salisbury

*DV Clearance is essential* please only apply if you hold this level of clearance, this is due to the classification of the project.

We are seeking an experienced DV cleared Security Architect support the design, build and assurance of Back End platform and endpoint security capabilities within secure, offline (air-gapped) environments.

This is a highly technical role suited to a security professional who can operate at both architectural and hands-on levels, with strong experience across endpoint protection, Antivirus/EDR, vulnerability management, platform security and secure environments. You will work closely with Infrastructure, Platform and Security teams, applying NIST Cybersecurity Framework principles and MOD security policies to deliver secure and compliant capabilities for a UK Government environment.

Key Responsibilities

• Lead the architecture, design and implementation of endpoint and platform security solutions.
• Design security controls aligned with MOD policies, NIST Cybersecurity Framework and NCSC guidance.
• Design and deliver vulnerability management capabilities, including scanning, risk prioritisation, remediation and reporting.
• Develop security solutions for offline and air-gapped environments, including controlled update, patch and signature distribution.
• Establish secure mechanisms for threat intelligence ingestion and data transfer within disconnected environments.
• Define and implement vulnerability scanning regimes and remediation processes.
• Advise on endpoint hardening, Firewall rules, ports, protocols and system security controls.
• Produce penetration testing scopes covering Back End platforms and endpoints.
• Produce and maintain formal technical documentation, including HLDs, LLDs, security architecture documentation and SOPs.

Essential Skills & Experience

• Proven experience operating as a Security Architect, Security Engineer or senior Security SME within secure, regulated or high-assurance environments.
• Designing and delivering: Platform security controls, Firewall, port and protocol security, Antivirus/Endpoint Protection/EDR solutions, Vulnerability Management platforms and Endpoint hardening and security controls
• Experience working within offline/air-gapped environments.
• Strong understanding of: Secure patching and update models, AV signature management, Threat intelligence management, Controlled data transfer mechanisms and Vulnerability assessment and remediation
• Experience producing formal technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), Security Architecture documentation and Standard Operating Procedures (SOPs)
• Experience supporting security accreditation, assurance and compliance processes.