We are seeking a Security Architect to define and drive the security direction across our cloud, application, and network environments. This is a strategic, hands-on architecture role responsible for setting security requirements, providing assurance across our technology estate, and ensuring risk is understood, prioritized, and reduced. The Security Architect works closely with engineering teams, application owners, and external vendors to embed security by design and to raise the overall maturity of our defensive posture.
The ideal candidate combines strong architectural thinking with practical security expertise, and can translate risk into clear, actionable direction for both technical and non-technical stakeholders.
Network & Edge Security Assurance
Provide security oversight and architectural guidance for our network and edge deployments (including WAF and related edge protections).Define the security requirements these deployments must meet, assess implementations against them, and ensure controls are effective, well-monitored, and continuously improved.Vulnerability Management
Own the strategy and architecture of the vulnerability management program. Establish a risk-based approach to identifying, prioritizing, and driving remediation of vulnerabilities — with particular focus on End-of-Life systems, higher-risk public-facing exposures, and closing outstanding penetration test findings.Ensure the organization has clear visibility of its vulnerability posture and progress over time.Threat Detection & Deception
Shape our threat detection capability, including the use of honeypots and deception technology to surface malicious activity early.Ensure detection sources feed into monitoring and incident response, and that resulting intelligence informs and strengthens our defensive controls.SaaS & Application Security Assurance
Define and lead the security assurance approach for SaaS and third-party applications.Set the standards for how applications are assessed, onboarded, and reviewed, and work directly with application owners and vendors to identify gaps, agree remediation, and verify that security requirements are met throughout the application lifecycle.Additional Information
