jobapplier

Security Architect

Our Future Health

Skills

Required

  • Azure
  • Agile
  • ISO 27001
  • modern cloud technologies
  • Microsoft Sentinel
  • Microsoft Defender suite
  • Microsoft Entra
  • Microsoft Purview
  • Azure security
  • Key Vault
  • Kubernetes

Preferred

  • SABSA
  • CISM
  • CISSP
  • CompTIA Security+
  • Cloud+

Join our team as a Security Architect, where you'll play a key role in supporting our Researcher pillar. In this hands-on position, you'll influence the security architecture that underpins our products, platforms, and cloud-first environment. You'll act as a trusted advisor to squads, partner with engineers to build security into solutions from the outset, and lead threat modeling activities. You'll also communicate security risks, opportunities, and recommendations to different audiences and support strategic Researcher initiatives.

Responsibilities

  • Collaborer avec les équipes pour façonner l'architecture sécurisée de l'organisation, influencer les décisions de conception et garantir la cohérence de l'approche de sécurité.
  • Agir en tant que conseiller de confiance pour les équipes, les aider à prendre des décisions technologiques sécurisées et éclairées.
  • Diriger les activités de modélisation des menaces et transformer les risques de sécurité en améliorations pratiques de la conception.
  • Relevant certifications, such as: SABSA Chartered Security Architect, CREST Registered Technical Security Architect (CRTSA), CISM, CISSP, Microsoft certifications (MS-500, AZ-500, AZ-700, SC-200, SC-300), CompTIA Security+ and Cloud+, Cloud Security Alliance CCSK

Requirements

  • Proven understanding of security risk management
  • Desire to be part of a small fast-paced team
  • Exposure to Agile working
  • Knowledge of ISO 27001 and other commonly used security standards

Understanding of modern cloud technologies

  • Experience with Microsoft Sentinel, Microsoft Defender suite, Microsoft Entra, Microsoft Purview and Azure security services (e.g. Key Vault, NSGs, WAF, etc.)
  • Experience with Kubernetes (Azure Kubernetes Service) and data platforms (e.g. Databricks, Snowflake, Dagster)
  • Experience of working with DevSecOps squads (or similar) in a ‘total ownership’ model
  • Excellent understanding of common security controls, in particular cloud security controls
  • Ability to translate between technical and non-technical teams
  • Extensive experience of developing security requirements
  • Understanding of threat modelling
  • Extensive experience of securely architecting cloud native systems, both at a high-level and in the technical details
  • Experience creating enterprise security architecture artefacts

Pay

GBP 90,000 - 103,500