Location: Basingstoke (Hybrid)
Salary: Up to £80K plus benefits
Security Clearance: Active UK DV required
Travel Required: Travel expected to client offices
We are seeking a Senior Security Architect to operate across mission-critical customer delivery and internal cutting-edge R&D projects. You will act as the security authority engaging with both customers and Nightball architects and engineers.
You will provide security governance and architectural oversight throughout project delivery, acting as the primary advisor to architects, engineering teams, project managers and senior leadership with an ability to communicate complex technical risks and security requirements to both technical and non-technical audiences.
Supporting the Nightball CISO, you will also contribute to security policies, standards and architectural roadmaps, supporting internal and external audits, assurance reviews and compliance assessments.
Risk Management and Assurance:
– Lead security risk identification, assessment, treatment, and acceptance activities.
– Apply recognised risk management frameworks including ISO27001 and NIS 800-37.
– Conduct security architecture reviews, threat assessments, and risk evaluations.
– Provide recommendations to reduce residual risk while enabling business and operational objectives.
– Support assurance activities for systems handling sensitive or classified information.
Security and Engineering Controls:
– Specify and assure security controls across networks, infrastructure, cloud, data and operational technology environments.
– Ensure security controls are traceable to identified threats, risks and compliance requirements using ISO27002 and NIST800-53 standards.
– Promote defence-in-depth, zero trust, least privilege and secure-by-default design principles.
– Support technical teams in the implementation and validation of security controls.
Threat Modelling and Security Assessment:
– Conduct threat modelling activities to identify security threats and attack vectors.
– Assess system vulnerabilities and architectural weaknesses.
– Develop mitigation strategies to address identified risks.
– Review the effectiveness of implemented controls against evolving threat landscapes.
The successful candidate will demonstrate experience in:
– Providing security support to projects within either the MoD, central government, critical national infrastructure or highly regulated environments.
– Applying and managing MOD Secure by Design methodology.
– Use of NIST800-37 Risk Management Framework and NIST800-53 for security control implementation.
– Implementing DEFSTAN 05-138 controls in support of Defence Cyber Certification and customer consulting engagements.
– Threat modelling and security architecture review techniques.
– Secure cloud, network, infrastructure and application design.
– Security assurance, accreditation, and governance processes.
Requirement: An active DV Clearance is essential due to the sensitive nature of the environments you will support.
Financial: Up to £80,000.
Security: Full-time, permanent role within a stable, high-growth sector.
Balance: A genuine hybrid working model based in Basingstoke and the South. Potential for international travel.
Perks: 25 days leave, private medical cover and a competitive pension.