Security Architect

Security Architect role ed in Bristol with Hybrid Working. Salary £85k + Benefits.

This role is responsible for designing, implementing, and overseeing security infrastructure to protect products and systems from security threats. It ensures security controls are integrated throughout the software development lifecycle, performs risk assessments, and collaborates with stakeholders to mitigate vulnerabilities. The Security Architect will also contribute to security compliance and best practices, ensuring products meet regulatory and industry standards.

• Identify security requirements and integrate controls into product development.
• Conduct risk assessments, threat modeling, and vulnerability analysis.
• Develop and implement risk management strategies using security frameworks.
• Collaborate with development teams to ensure security best practices and secure-by-design principles.
• Identify and mitigate security risks in solution architectures.
• Create security documentation (e.g., RMADS, Security Assurance Documents).
• Support incident response and remediation efforts for security breaches.
• Provide security guidance and training to teams across the organization.

• Strong knowledge of security frameworks (ISO 27001, NIST 800-30/53, OWASP).
• Experience with risk management methodologies and compliance with MOD and HMG security standards (JSP, Def Stan 05-138/139).
• Proficiency in security threat modeling and risk assessments.
• Knowledge of secure development practices, penetration testing, and vulnerability assessments.
• Ability to communicate security risks and strategies to technical and non-technical stakeholders.
• Experience in incident response and remediation.
• Strong analytical and problem-solving skills.

• Degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).
• Certifications such as CISSP, CISM, OSCP, GIAC (preferred but not mandatory).
• Must be eligible for SC security clearance.
• Experience working in defense, government, or high-security environments is a plus.
• Knowledge of cloud security architectures (AWS, Azure, GCP) is advantageous.

• Seniority level:
  Mid-Senior level
• Employment type:
  
  Full-time
• Job function:
  Information Technology
• Industries:
  Technology, Information and Internet