> Markdown version of [/jobs/ext/2260062-lead-security-architect](https://www.wearedevelopers.com/jobs/ext/2260062-lead-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Security Architect - **Company:** SiXworks an IBM company - **Location:** Farnborough, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Agile Methodology, Artificial Intelligence, Amazon Web Services, Apache HTTP Server, Microsoft Azure, Cyber Security, Information Technology Consulting, Continuous Integration, Digital Technology, Information Systems Security Architecture Professional, Javaserver Pages, Machine Learning, MongoDB, Node.Js, Software Engineering, TypeScript, SC Clearance, Kubernetes, Information Technology, Apache Kafka, Apache Nifi, Devsecops, Docker - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815172430-lead-security-architect ## About the Role * Able to perform Risk management using industry approved methodologies (such as NIST 800-53). Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks; * Support development in a secure by design methodology; * Be able to work at a technical level with teams; * Identification / design / selection of appropriate security components to provide security enforcing functions (e.g. network, endpoints, cryptography, authentication, authorisation, data inspection etc) for a variety of infrastructures including cloud environments; * Legal and regulatory topics that merit consideration when conducting various activities in the field of cyber security; * Creation of security documentation to support the development of a system, these could include: security Aspects, Risk Assessment, Risk Management, Security Policies, Security Test Plans/Results, Evaluation documents; * Knowledge of JSP 604 / 453 and creation of assurance artefacts; * High standards in written report and design documentation., * Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environments; * Appreciation of the constraints and requirements imposed on development within secure, safety-critical environments; * Concepts and technologies that are used to engineer systems which inherently protect systems; * Understanding of MOD and other departmental IT in defence and security; * Experience of working with MOD Accreditors; * Knowledge of Onsite / project tech stack includes but is not limited to Azure, AWS, Docker, Kubernetes, Apache (NiFi, Kafka), NodeJS, Typescript, MongoDB, AI, Machine Learning etc. ## Description Lead Security Architect - SiXworks, an IBM company We are looking to recruit a Lead Security Architect to join us on fast-moving, innovative, and influential work underway in the Defence and Security Sector. What do we look for in a Security Architect? As a Lead Security Architect in a cutting-edge technology environment, you will have a challenging, vastly interesting, and technically diverse role. Key Responsibilities and Tasks * Risk Management within a Defence and Security Sector; * Security/Cyber architectures proportionate to the GSC of the systems; * Security architectures delivered in conjunction with other IT Architects and SMEs; * Apply security design specifics to develop the security architecture; * Strategic direction of Security projects; * Producing evidence to meet various MOD regulations; * Designing options and solutions to mitigate vulnerabilities; * Working with various teams across the business including Software Engineering, DevSecOps Engineering, Infrastructure Engineering, Agile and Cyber Security; * Either holds or has recently held government security clearance already, or is suitable for and willing to go through the vetting process (suitability includes an absence of a serious criminal record, a right to work and live in the UK, and preferably a record of 5 years' UK residency). Experience (Essential) * Able to perform Risk management using industry approved methodologies (such as NIST 800-53). Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks; * Support development in a secure by design methodology; * Be able to work at a technical level with teams; * Identification / design / selection of appropriate security components to provide security enforcing functions (e.g. network, endpoints, cryptography, authentication, authorisation, data inspection etc) for a variety of infrastructures including cloud environments; * Legal and regulatory topics that merit consideration when conducting various activities in the field of cyber security; * Creation of security documentation to support the development of a system, these could include: security Aspects, Risk Assessment, Risk Management, Security Policies, Security Test Plans/Results, Evaluation documents; * Knowledge of JSP 604 / 453 and creation of assurance artefacts; * High standards in written report and design documentation. Experience (Nice to have) * Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environments; * Appreciation of the constraints and requirements imposed on development within secure, safety-critical environments; * Concepts and technologies that are used to engineer systems which inherently protect systems; * Understanding of MOD and other departmental IT in defence and security; * Experience of working with MOD Accreditors; * Knowledge of Onsite / project tech stack includes but is not limited to Azure, AWS, Docker, Kubernetes, Apache (NiFi, Kafka), NodeJS, Typescript, MongoDB, AI, Machine Learning etc. About SiXworks SiXworks is a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail-safe-fast cutting-edge technology solutions deployed in highly secure environments. We are unified in our mission to accelerate innovation and adoption of secure, digital technology to improve the operational agility of Defence and National Security. This is an exciting time for us, we have ambitious plans for continued growth and development, and we are seeking to add brilliant, experienced, motivated, and passionate people to our team to work with us on this journey. What can we offer in return? SiXworks offers a unique work culture around our core principles Agility, Security, Innovation, Quality, Collaboration and Inclusivity. Together, these six principles form SiXworks' NORTH STAR, guiding the organisation towards success. This is reflected in the raft of benefits available to all our employees. A word on UK Security Clearance Due to the secure nature of the position and working environment, you must have, or be eligible to obtain Security Clearance. More details relating to UK Security Clearance can be found here on the GOV.UK website. Notice SiXworks recognises the benefits of Reserve service to Country, Company and individual. We support Reservists and actively encourage them to apply. We are not considering submissions from agencies. Seniority level Mid-Senior level Employment type Contract Job function Information Technology Industries IT Services and IT Consulting and Defence and Space Manufacturing ## Related Videos - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Stop using Node.js like in 2020! What changed and what you can do today with Node.js](https://www.wearedevelopers.com/videos/100011-stop-using-node-js-like-in-2020-what-changed-and-what-you-can-do-today-with-node-js) - [40 Minutes to Build a Serverless COVID-19 REST and GraphQL APIs](https://www.wearedevelopers.com/videos/208-40-minutes-to-build-a-serverless-covid-19-rest-and-graphql-apis) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)