Senior Security Architect Hybrid Threat Modelling Lead

SSE plc; Glasgow; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

SSE plc is seeking a Senior Security Architect to lead the design, governance and implementation of security architectures across digital, cloud and data-driven solutions. You will embed threat modelling, drive consistent controls, and collaborate with cross-functional teams to ensure secure, compliant delivery in both agile and traditional environments.

The role requires SC vetting, UK residency and alignment with NCSC/NIST frameworks.

Qualifications

• Proven experience designing and governing security architectures in complex or regulated environments.
• Strong cloud security knowledge (AWS, Azure), IAM, encryption and zero-trust concepts.
• Experience with threat modelling and translating threats into technical controls.
• Familiarity with regulatory frameworks (e.g., NIS) and applying them to design.
• Professional security certifications (CISSP, CCSP, Azure/AWS Security) or equivalent.
• SC level vetting required with UK residency (5 years).

Responsibilities

• Lead the design and assurance of security architectures across digital, cloud and data‑driven solutions, ensuring best practices and regulatory alignment.
• Facilitate threat-modelling to identify risks, attack paths and mitigations early in development.
• Ensure consistent security controls across business units with reusable patterns and reference architectures.
• Collaborate with architecture, engineering and delivery teams to embed security in agile and traditional delivery, including DevSecOps and automated testing.
• Own SSEN Distribution security architecture end-to-end, overseeing risks, controls, compliance and secure operations.

Skills

Security architecture design

Cloud security (AWS/Azure)

Threat modelling

Regulatory/compliance knowledge

Security certifications

Vetting readiness

Job description

SSE plc is seeking a Senior Security Architect to lead the design, governance and implementation of security architectures across digital, cloud and data-driven solutions. You will embed threat modelling, drive consistent controls, and collaborate with cross-functional teams to ensure secure, compliant delivery in both agile and traditional environments.

The role requires SC vetting, UK residency and alignment with NCSC/NIST frameworks.