Security Architect

TL;DR

Security Architect: Designing and assuring secure systems for internal platforms and customer-facing solutions with an accent on threat modelling, risk assessment, and security governance. Focus on embedding security by design within complex, regulated public-sector environments and supporting formal accreditation activities.

Location: Must be based in the UK with the right to work and travel within the UK.

Company

A provider of software solutions supporting critical public-sector services.

What you will do

• Produce security architecture designs aligned with the overarching framework.
• Conduct threat modelling and risk assessments for applications and platforms.
• Create security assurance documentation for internal governance and formal accreditation.
• Collaborate with technical and enterprise architects to ensure solutions are secure by default.
• Assess emerging threats and vulnerabilities to advise on remediation strategies.
• Present security designs and risk positions to the Technical Assurance Board.

Requirements

• Must have pre-existing right to work and travel within the UK.
• Must hold or be able to gain Enhanced Security Clearance (SC level or NPPV Level 3).
• Strong experience in designing and assuring secure systems.
• Solid understanding of security principles, non-functional requirements, and risk management.
• Confidence in engaging with stakeholders across engineering and governance.
• Experience working in regulated or public-sector environments is highly preferred.

Nice to have

• Familiarity with standards such as ISO 27001, NCSC Cyber Essentials, NIST, or CIS.

Culture & Benefits

• Private medical cover funded by the company.
• 25 days paid holiday with buy/sell options.
• Group pension plan with employer contributions up to 8.5%.
• Life assurance cover at 4x basic salary.
• Free access to LinkedIn Learning for professional development.
• Collaborative environment focused on pragmatism and continuous improvement.