Cyber Security Architect & Engineering Lead

Department: IT Infrastructure

Employment Type: Permanent - Full Time

Location: City, London

Reporting To: Head of Information Security

Compensation: £75,000 / year

Description

Key Responsibilities

• Define and maintain security architecture across identity, endpoints, networks, cloud, SaaS, data, applications and integration platforms.
• Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation.
• Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies.
• Act as the technical lead for AI security, helping to establish practical controls for Microsoft 365 Copilot, AI agents, custom AI applications and related technologies.
• Provide senior technical oversight across security monitoring, detection engineering, incident response and recovery capability.
• Lead or support the response to complex or high-severity security incidents, working with internal teams, external SOC providers and specialist partners.
• Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation.
• Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual obligations.
• Provide clear, risk-based technical advice to senior leaders, project teams and technology owners.
• Coach technology teams in secure design and engineering practices, helping to build security capability beyond the core security team.

What we’re looking for

• Strong experience designing and implementing security controls in a Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview.
• Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application security, API security and secure software development.
• Experience of security architecture review, threat modelling, technical standards, reference architecture and control design.
• Practical experience across incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation.
• Ability to automate security and assurance processes using tools such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms.
• Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security or governance frameworks.
• The ability to explain complex technical risk clearly to senior stakeholders and influence delivery teams without relying on formal authority.
• A practical, outcome-focused approach, with a track record of taking ownership, improving controls and validating that they work effectively.

• Microsoft Certified: Cybersecurity Architect Expert, SC-100
• CISSP or CCSP
• Microsoft security certifications such as AZ-500 or SC-200
• GIAC certifications in incident response, cloud, detection or forensics
• ISO 27001 Lead Implementer or Lead Auditor
• Architecture or threat-modelling accreditation such as SABSA, TOGAF or equivalent practical experience

Job Benefits