Ofertas › Version 1
Version 1 · London, United Kingdom · £49,000 - 66,000 per year
Salary: £49,000 - 66,000 per year Requirements: We have designed and validated security architectures for enterprise-scale programmes across cloud platforms, application security, identity and access management, and system integration. We have delivered successful security outcomes and taken clear ownership of the security design decisions behind them. We have experience securing workloads on AWS and/or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. We understand AppSec practices including secure SDLC, SAST/DAST tooling, API security, and container security in agile delivery contexts. We have worked directly with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. We communicate clearly with both technical teams and non-technical leadership. Highly desirable: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications. Highly desirable: familiarity with DSP Toolkit or equivalent assurance frameworks. Highly desirable: experience designing controls for regulated financial environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Highly desirable: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Highly desirable: holding or working towards CISSP, CISM, CCSP, or equivalent. Highly desirable: experience assessing and mitigating risks in AI/ML solution architectures, including data exposure, prompt injection, model supply chain, and output integrity. Responsibilities: We partner with government, financial services, and private sector clients to design security solutions for complex digital risks. We translate threat landscapes, compliance obligations, and business constraints into practical security architectures. We work across the full engagement lifecycle from threat modelling and security options analysis through to facilitating design sessions with delivery teams. We present recommendations to architecture review boards and senior stakeholders. We define security approaches such as zero-trust for government departments and security controls for cloud migrations. We guide development teams through secure-by-design decisions. We embed security thinking early in delivery and keep it there. We guide and upskill delivery teams on secure-by-design practices. We help engineers and p