Enterprise Architect jobs in United Kingdom

Managing Security Architect. The Service Architect operates within the Service Pillar of the SOC and is responsible for client engagement, service design, and use case discovery. The role combines elements of client success management and business analysis, with a focus on helping clients identify their detection needs and framing them as structured, measurable questions. This role supports both pre-sales and in-life service phases, working closely with clients, analysts, and engineers to ensure that detection capabilities are aligned with business risks, regulatory requirements, and threat landscapes. This is not to produce but to interpret client documentation and needs.

To ensure that SOC services are designed and delivered in a way that meets client needs, by identifying detection use cases provided by the client through workshops, translating them into structured requirements, and supporting their implementation across the SOC.

• Engage with clients to understand (but not create) their business context, risk profile, and detection priorities.
• Facilitate workshops and discovery sessions to identify detection use cases and security questions.
• Translate detection needs into structured, measurable use cases - framed as data science questions where appropriate.
• Develop user stories, acceptance criteria, and supporting documentation to guide detection content development.
• Collaborate with Detection Content Engineers and Security Engineers to ensure use cases are technically feasible and supported by available data.
• Support onboarding of new clients by defining detection requirements and aligning them with SOC capabilities.
• Maintain a catalogue of client-specific use cases, mapped to MITRE ATT&CK and other relevant frameworks.
• Act as a point of contact for client feedback, service improvement discussions, and roadmap planning.
• Ensure alignment with CREST standards and contribute to service maturity uplift initiatives.
• Undertake additional tasks or responsibilities as directed by the Head of SOC, Managing Security Architect or Design Authority.