Security Architect

Job title: Security Architect

Duration: 9 months

Clearance required: DV or DV Eligible

Rate: To be discussed

Location: Hybrid, onsite in Corsham twice a week

Specification: Below

Overview:

• We're looking for an experienced Security Architect to join a long-term programme delivering secure Back End platform, endpoint protection and vulnerability management capabilities within highly secure, air-gapped environments.
• This is an opportunity to play a key role in designing and assuring security solutions that support critical national infrastructure, working alongside infrastructure and security teams to ensure systems remain secure, compliant and resilient.

Key Responsibilities:

• Lead the architecture, design and implementation of platform security solutions.
• Design security capabilities for secure, offline (air-gapped) environments.
• Implement endpoint protection, AntiVirus and Endpoint Detection & Response (EDR) technologies.
• Define and implement vulnerability management frameworks, including scanning, remediation and reporting.
• Design secure patching, signature update and threat intelligence processes for disconnected environments.
• Conduct security assurance activities including design reviews, compliance assessments and audit support.
• Support risk management and accreditation activities.
• Produce High-Level Designs (HLDs), Low-Level Designs (LLDs), security documentation and operational procedures.
• Work closely with infrastructure, platform and security teams to deliver secure solutions.
• Engage with stakeholders across secure environments.
• Define penetration testing scope for both Back End platforms and endpoint devices.

Essential Skills & Experience:

• Security Architecture within highly secure or regulated environments.
• Platform security controls, including Firewalls, ports, protocols and secure configuration.
• Enterprise AntiVirus and Endpoint Detection & Response (EDR) platforms.
• Vulnerability Management tooling and processes.
• Designing and supporting secure offline/air-gapped environments.
• Secure patching and update mechanisms.
• Endpoint hardening and system security controls.
• Producing technical documentation including HLDs, LLDs and security architecture documentation.
• Working with the NIST Cybersecurity Framework.
• Applying NCSC Cyber Security Design Principles and Secure by Design methodologies.
• Security assurance, governance and compliance activities.

Desirable Experience:

• Defence or Aerospace sector experience.
• Working within classified or high-assurance environments.
• Experience supporting security accreditation activities.
• Incident response within restricted or disconnected networks.
• Knowledge of UK Government security standards and frameworks.

If you are available and interested in this opportunity, please apply for further information. Please note that due to high volumes of applications we are unable to contact every applicant. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion.

At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.