Security Solutions Architect | United Kingdom

ExtraHop; United Kingdom; On-site; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Health, Dental, and Vision Benefits

Flexible PTO

Educational reimbursement

401(k) with employer match

Hybrid and remote work model

Job summary

ExtraHop is seeking a cybersecurity expert to join their Solutions Architecture team in the UK. The position focuses on customer outcomes by designing advanced data visualization tools and providing solutions based on clients' security objectives.

The ideal candidate will have 6-8 years of relevant experience, a strong technical background in networking principles, and proficiency in languages like Python and JavaScript. The role offers a hybrid work model along with comprehensive health benefits.

Qualifications

• 6–8 years of relevant cyber-security experience.
• Experience in customer-facing roles with strong communication skills.
• Solid understanding of networking principles and application protocols.

Responsibilities

• Design and develop GUI layouts for data visualization.
• Create Trigger Scripts using JavaScript.
• Develop external REST API integrations.

Skills

Cyber-security experience

Networking technologies

Interpersonal skills

Python

JavaScript

Incident response

Technical documentation

Education

BS degree in a relevant discipline

Tools

Intrusion Detection Systems

SIEM

Endpoint Protection

MITRE ATT&CK framework

Job description

Position Summary

ExtraHop’s Solutions Architecture team is focused on customer outcomes and long‑term success, not on accumulating billable hours. As a member of our UK practice, you will collaborate closely with customers to understand their security objectives, translate those objectives into actionable technical strategies, and deliver solutions that demonstrate tangible value.

Key Responsibilities

• Design and develop advanced GUI layouts for data visualization and analysis.
• Create sophisticated Trigger Scripts using JavaScript for custom data analysis tailored to customer requirements.
• Develop intermediate‑level external REST API integrations; build custom tooling using Python and JavaScript‑based APIs to extend platform functionality.
• Apply a solid understanding of networking principles, particularly application transaction flows, to support customer business outcomes.
• Profile industry‑specific applications across a broad range of verticals; produce technical assets and written collateral to support product improvement and marketing initiatives.
• Analyse customer network topologies and application stacks; develop strategies to acquire high‑value data from the wire.
• Conduct root cause analysis of high‑profile technology incidents and advise customers on resolution pathways.
• Develop custom signatures using specific or generic indicators‑of‑compromise.
• Create rich data visualizations to support tactical investigations and inform strategic objectives.
• Build automated tooling to streamline repeatable processes and maximize time spent on higher‑value, intelligent solutions.
• Provide intelligence and analytical data to support, and guide, threat hunting activities.
• Deliver hands‑on enablement sessions with key customer stakeholders and technical personnel.
• Create solutions that decrease mean‑time‑to‑investigate in incident response processes.

Required Qualifications

• 6–8 years of relevant cyber‑security experience with commensurate experience in networking technologies.
• BS degree in a relevant discipline, or equivalent education and practical experience.
• Demonstrable experience in customer‑facing roles; strong interpersonal and communication skills.
• Solid understanding of core networking principles (layers 2 through 4 of the OSI model) and application protocols (HTTP, SQL, CIFS/NFS, HL7, Memcache, DNS).
• Familiarity with internet‑worked application principles and related technologies (HTTP, databases, caching, distributed systems, etc).
• Working knowledge of security tools and frameworks, including Intrusion Detection Systems, SIEM, Endpoint Protection, MITRE ATT&CK framework.
• Experience in incident response, threat hunting, and vulnerability validation.
• Proficiency in scripting languages, particularly Python and JavaScript.
• Excellent written communication skills, with the ability to produce clear technical documentation and customer‑facing materials.
• Self‑motivated with a strong sense of ownership and drive to shape and grow a regional practice.

Benefits

• Health, Dental, and Vision Benefits
• Flexible PTO, Sick Time prorated based on date of hire, and all federal holidays (US only) + 3 days of paid volunteer time
• Non‑commissioned positions may be eligible to participate in the annual discretionary bonus plan
• FSA and dependent‑care accounts + EAP, where applicable
• Educational reimbursement
• 401(k) with employer match or pension where applicable
• Pet insurance (US only)
• Parental leave (US only)
• Hybrid and remote work model