Senior Security Architect - Cloud & Threat Modelling Lead

SSE plc; Perth; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Flexible First options

Private healthcare discounts

Wellbeing resources

Cycle to Work

Family benefits

Job summary

SSE plc is seeking a Senior Security Architect to lead the design and governance of security architectures across digital, cloud and data-driven solutions. The role requires running threat modelling activities and ensuring secure operations aligned with NCSC, NIST and IEC 62443.

Expect to collaborate with architecture, engineering and delivery teams to embed security into agile and traditional delivery models, including DevSecOps practices and automated security testing.

Qualifications

• Proven experience designing and governing security architectures in complex environments.
• Strong understanding of cloud security (SaaS, PaaS, IaaS) including IAM and zero-trust concepts.
• Hands-on threat modelling translating threats into actionable controls.
• Knowledge of regulatory frameworks such as NIS/IEC 62443 and applying them to design.
• Professional security certifications (e.g., CISSP, CCSP) or equivalent experience.

Responsibilities

• Lead design and assurance of security architectures across digital, cloud and data-driven solutions.
• Facilitate threat modelling to identify risks, attack paths and mitigations.
• Apply security controls consistently across business units and reference architectures.
• Collaborate with architecture, engineering and delivery teams to integrate security into agile and traditional models.
• Own SSEN Distribution security architecture including risk, controls, compliance and secure operations.

Skills

Security architecture

Cloud security

Threat modelling

Regulatory compliance

Certifications

IAM

Secure cloud-native design

Tools

AWS

Azure

Job description

SSE plc is seeking a Senior Security Architect to lead the design and governance of security architectures across digital, cloud and data-driven solutions. The role requires running threat modelling activities and ensuring secure operations aligned with NCSC, NIST and IEC 62443.

Expect to collaborate with architecture, engineering and delivery teams to embed security into agile and traditional delivery models, including DevSecOps practices and automated security testing.