Solution Architects - Cyber Security

Initialize; Reading; Hybrid; GBP 85,000 - 110,000; Full time

Job summary

Initialize is seeking a Solution Architect for Cyber Security on a 6-month contract in Reading, ideally up to 2 days a week. The role focuses on designing secure, enterprise-scale solutions across AWS/Azure and on-prem environments within a cyber security portfolio.

You will work across multiple streams, engage with the SOC, contribute to threat and vulnerability management, and ensure compliance with CIS/NIST frameworks; review network security, IAM, and VPN strategies.

Qualifications

• Experience collaborating with the Security Operations Centre (SOC) to optimise security monitoring, response planning and execution.
• Experience with assisting the development of a TOM for Vulnerability Management.
• Understanding of vulnerability management and threat landscape detection and remediation.
• Understanding of Network Security risks and solutions.
• Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, etc)
• Knowledge of Claroty and SIEM.

Tools

M365 security stack

Cloud Security

CIS/NIST frameworks

Claroty & SIEM

Job description

Solution Architects - Cyber Security (ideally, up to 2 days a week Reading) 6 months +

You will experience in 1 of the following 3 and experience working as Solution Architect on large scale programmes within a Cyber Security Portfolio.

1 - Working knowledge of security architecture requirements for solution designs, good security practices related to AWS/Azure PaaS, IaaS, SaaS configuration and an understanding of enterprise scale solutions.

Experience collaborating with the Security Operations Centre (SOC) to optimise security monitoring, response planning and execution.

Experience with assisting the development of a TOM for Vulnerability Management.

Understanding of vulnerability management and threat landscape detection and remediation

Understanding of Network Security risks and solutions

Essential Technical Skills & Qualifications

Experience of the M365 security stack: Endpoint, Defender, DLP, Device Management, Azure Sentinel

Cloud Security (Tenable, MDR solutions, Remote Access, Network security)

Working knowledge of Cyber Essentials, UK DPA/GDPR

Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, etc)

Knowledge of Claroty and SIEM

2 - Experience with Cyber Security tools such as Tenable (or Qualys/Rapid7), Claroty (or Nozomi/Dragos), ServiceNow, and SIEM platforms (eg Splunk, Microsoft Sentinel).

Working knowledge of CMDB and asset discovery data models, and API-based integration patterns between security and ITSM tooling.

Working knowledge of network segmentation, secure remote access and secure-domain migration patterns for OT environments.

Working knowledge of NCSC Cyber Assessment Framework (CAF), CIS Controls and regulatory requirements (eg NIS Regulations, DWI).

Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, IEC 62443, MITRE ATT&CK).

Excellent written and verbal communication, with the ability to simplify complex designs for decision-makers.

3 - Experience with Cyber Security tools such as Cisco ISE, Aruba ClearPass, Forescout or FortiNAC (NAC); Tenable, Qualys, or Armis (discovery); Fortinet, Checkpoint, or Palo Alto (VPN and Firewalling); and SIEM/log management platforms (eg Splunk, Microsoft Sentinel).

Adept with Fortinet and Checkpoint Firewall configuration and ability to review network and segmentation designs.

Working knowledge of RADIUS/TACACS+, 802.1X, and PKI/certificate-based authentication.

Working knowledge of Cyber Essentials, UK DPA/GDPR, and log retention/data protection compliance requirements.

Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, MITRE ATT&CK).

Experience assessing or deploying network access and segmentation controls in OT/ICS or IoT-heavy environments.

Experience integrating VPN, NAC, and discovery solutions with MDM/UEM platforms (eg Microsoft Endpoint Manager/Intune) for device compliance data.

Experience leading the end-to-end technical delivery of a Cyber Security Programme.