Security Architect

Security Architect

We are looking for a highly skilled Security Architect with expertise in threat modeling and experience with the STRIDE framework to join our security team. The ideal candidate will be responsible for ensuring the security of our critical assets and supporting subsystems by setting up security tools, performing regular threat monitoring, and working closely with our current architecture team to secure ongoing projects and network infrastructure. This is a 6 month contract inside IR35 with a posible extenstion.

Key Responsibilities:

• Perform detailed threat modeling exercises, focusing on identifying, analysing, and mitigating security threats to critical assets and subsystems using the STRIDE framework.
• Design and implement security architectures, aligning with TOGAF standards, to ensure secure system development and integration of security controls.
• Lead the setup, configuration, and optimisation of security tools across the organization, conducting security assessments and evaluations to ensure comprehensive protection.
• Regularly monitor security threats and vulnerabilities across the organization, identifying any changes or new risks, particularly with regard to product updates and organizational changes.
• Provide support to the existing security architect team, collaborating on various security initiatives, including architectural design and system hardening.
• Participate in network security projects, including network segmentation efforts to improve isolation and defence mechanisms.
• Collaborate with software development teams to integrate security best practices throughout the SDLC, ensuring security is embedded in all stages of the product lifecycle.
• Support the implementation and management of network security controls and ensure that tooling meets organizational requirements for secure operation.

Qualifications:

• Strong experience with STRIDE or similar threat modeling frameworks.
• Expertise in security architecture frameworks such as TOGAF.
• Experience working within secure SDLC processes.
• Familiarity with network security concepts, tools, and methodologies, including network segmentation.
• Hands-on experience in setting up and managing security tools for monitoring and protection.
• Strong collaboration skills and ability to work closely with cross-functional teams.

This role offers the opportunity to play a critical part in shaping and maintaining the security architecture of the organisation, ensuring the protection of key assets and supporting the wider architecture team in strategic projects.