Lead security capability architect
Oxford, Oxfordshire, OX1, England, UK
Listed on 2026-10-15
-
IT/Tech
Cybersecurity, IT Consultant, IT Project Manager
Salary: Circa £60,000 per annum (negotiable based on experience) + comprehensive benefits package
Jisc grade: TCY4 (internal use only)
Job Type: Permanent
Hours: 35 hours per week
Reports into: Head of security intelligence and capability
Working style: Hybrid - A blend of working from home and your nominated hub office. We have hubs located in London, Bristol, Manchester and Oxford.
About Jisc:At Jisc, we're driven by a simple ambition: to use technology to transform education, research and innovation.
For more than 30 years, we've been the digital partner for the UK's education and research sectors, providing world-class networks, innovative digital services and expert guidance that help universities, colleges and research institutions thrive.
Our work supports millions of learners, educators and researchers every day, enabling everything from ground breaking discoveries and life-changing research to exceptional digital learning experiences. While many people may not realise it, the technology and services we provide help power some of the UK's most important educational and research achievements.
Join Jisc and you'll be part of a purpose-driven organisation where your ideas can have a real impact. Together, we're shaping the future of learning, research and innovation for the benefit of society.
About the Team:Jisc’s Security Team safeguards the Janet Network whilst also sharing intelligence and advising our members to keep their own networks safe. We draw on a range of market leading solutions, combined with in-house tools, benefiting from the team's expertise in developing a service best suited to our members.
The security capability development function sits alongside the CTI and SOC teams. The CTI team gathers and analyses threat intelligence to ensure our defences are informed by current and emerging adversary activity. The SOC is provided as an Education and Research sector focused service, which requires input from both threat intelligence and a capability development function, to continue delivering detections that are ahead of the threats as well as new solutions that keep pace with member requirements.
About the role:The Lead Security Capability Architect is a senior technical role responsible for building a function dedicated to the research and development of new security capabilities. This function will shape the future of our SOC, ensuring it remains effective, adaptive and ahead of the evolving threat landscape.
This role has a multifaceted responsibility for research, engineering and security operations. It will require a deep technical knowledge with the ability to identify strategic opportunities for improvement, translating operational requirements into workable solutions and lead the full development lifecycle, taking a solution from initial concept to operational handover.
Working closely with the CTI team and security engineers, the role will ensure that new capabilities are developed collaboratively, informed by intelligence and built to a standard that enables seamless transition into long-term operational management.
What you’ll be doing :- Lead the end-to-end development of new security tools, integrations, automations and services.
- Oversee the full development lifecycle from requirements gathering through design, build, testing and documentation, ensuring solutions are built to a standard that enables a clean handover for long-term management.
- Work closely with SOC and CTI leadership to understand operational pain points and translate them into capability requirements.
- Engage with vendors and external partners as required during evaluation and development phases.
- Build, lead and develop the security capability function as it establishes and grows.
- Act as a point of…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).