Security Architect

12-Month Fixed-Term Contract | Up to £90,000

Location: Watford

We’re partnering with a high-profile, regulated consumer organisation to appoint an experienced Security Architect on a 12-month fixed-term contract.

This is an excellent opportunity for a security professional with strong enterprise architecture experience to support a large-scale transformation programme involving multiple high-security-impact work streams.

Working within the Enterprise Security team, you’ll produce high-level and low-level security designs, conduct risk assessments and ensure solutions comply with relevant security policies, standards and architectural patterns.

As Security Architect, you’ll help ensure security is embedded into technology solutions from the earliest stages of the project lifecycle.

You’ll work closely with Technology Solution Architects, Project Managers, Business Analysts and other key stakeholders, supporting projects from the production of technical design documentation through to the secure delivery of solutions into production.

This is a highly collaborative role requiring strong technical knowledge, structured security-design experience and the ability to communicate complex risks clearly to both technical and non-technical stakeholders.

You’ll support the design and delivery of secure enterprise technology solutions by:

• Providing specialist security support as part of multidisciplinary project teams.
• Working with Technology Solution Architects to embed security into solutions early in the project lifecycle.
• Balancing security requirements with wider project considerations, including cost, pace and quality.
• Supporting the security triage of proposed solutions and helping projects identify appropriate resource requirements.
• Conducting security risk assessments using recognised threat-modelling techniques.
• Producing high-level and low-level security designs for high-security-impact work streams.
• Defining security requirements based on risk assessments, security standards and established architectural patterns.
• Assessing and communicating security risks and areas of non-compliance to programme stakeholders and service owners.
• Supporting stakeholders in reaching appropriate and agreed risk positions.
• Undertaking security-design governance activities and updating design artefacts in response to feedback.
• Producing test plans and scopes for functional security testing and penetration testing.
• Supporting internal and external security-testing resources throughout the testing process.
• Providing security input from initial technical design through to the successful delivery of solutions into production.

You’ll be an experienced Security Architect with a strong background supporting enterprise-level projects and designing secure solutions across complex technology environments.

You will also have:

• Proven experience providing security architecture support to enterprise-level projects and programmes.
• Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK.
• Experience producing structured, high-quality security requirements and designs that comply with relevant standards.
• Broad technical knowledge across infrastructure, networks, systems, databases and applications.
• A strong understanding of identity and access management, cryptography, endpoint security, network security and application security.
• Knowledge of security logging and monitoring, vulnerability management and wider security operations.
• Experience working with external parties to produce security test plans and support activities such as penetration testing.
• A strong understanding of cloud security architecture and principles across IaaS, PaaS and SaaS environments.
• Knowledge of…