> Markdown version of [/jobs/ext/29217-security-architect](https://www.wearedevelopers.com/jobs/ext/29217-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect

- **Company:** Datasource
- **Location:** UK
- **Salary:** £80,000.0 - £95,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cyber Security, Javaserver Pages, Mod Security, Software Vulnerability Management, Backend
- **Published:** May 26, 2026
- **Apply:** https://www.datasourcerecruitment.co.uk/jobs/security-architect/

## About the Role

Our client is looking for an experienced Security Architect with deep expertise in endpoint security and vulnerability management to support a high-profile UK Government defence account. You'll be designing and delivering security capabilities within secure, air-gapped environments, so hands-on experience in offline network security is essential., · Demonstrable experience as a Security Architect or senior security SME in secure or regulated environments.

· Proven ability to design and deliver enterprise AV and Endpoint Detection and Response (EDR) solutions.

· Strong hands-on experience with vulnerability management platforms, lifecycle processes, and remediation reporting.

· Solid experience working in offline or air-gapped environments including secure patching and AV signature management.

· Working knowledge of MOD security standards including JSP 440, JSP 604, JSP 453, and NCSC guidance.

· Experience applying the NIST Cybersecurity Framework within platform and endpoint security design.

· Ability to produce formal technical documentation including HLDs, LLDs, security architecture docs, and SOPs.

· Experience supporting security accreditation, risk management, and compliance evidence generation for MOD programmes.

The client would also like to see some of the below, but this is not essential:

· Previous experience working within the Defence and/or Aerospace sector.

· Familiarity with classified or high-assurance government environments.

· Understanding of MOD operating models and delivery frameworks.

· Experience supporting incident response within restricted or disconnected networks.

## Description

· Lead the architecture, design, and implementation of endpoint security solutions across backend platforms.

· Design and deliver security capabilities for offline, air-gapped environments including secure update mechanisms.

· Define and implement vulnerability management frameworks covering scanning, risk prioritisation, and remediation.

· Ensure all solutions comply with MOD and UK Government security policies including JSP and NCSC guidance.

· Conduct security assurance activities including design reviews, compliance assessments, and audit support.

· Produce and maintain formal security documentation including HLDs, LLDs, SOPs, and accreditation evidence.

· Support MOD risk management and accreditation processes in line with governance requirements.

· Define penetration testing scope for both backend platforms and end-user endpoints.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [WeAreDevelopers LIVE - "Fun and games - and all that comes with it", Back to BASIC & more](https://www.wearedevelopers.com/videos/1719-wearedevelopers-live-fun-and-games-and-all-that-comes-with-it-back-to-basic-more)
- [Developing the Backend with Stefan Lingler, CTO at Shpock](https://www.wearedevelopers.com/videos/100360-developing-the-backend-with-stefan-lingler-cto-at-shpock)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Nest.js - TypeScript in the backend can also be clean](https://www.wearedevelopers.com/videos/1033-nest-js-typescript-in-the-backend-can-also-be-clean)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)