> Markdown version of [/jobs/ext/3286423-lead-security-architect](https://www.wearedevelopers.com/jobs/ext/3286423-lead-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Security Architect - **Company:** Department for Environment, Food & Rural Affairs (DEFRA) - **Location:** Newcastle upon Tyne, UK (Remote available) - **Experience:** Expert - **Salary:** £58,207.0 - £64,715.0 - **Contract:** Permanent contract - **Skills:** Data Streaming, Systems Architecture - **Published:** September 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=95b5db25520ffb88 ## About the Role * Proven experience working directly within agile/project delivery environments alongside multidisciplinary software and infrastructure teams. * Deep expertise in threat modelling, risk management frameworks (STRIDE, PASTA, or similar), and secure system design. * Proven track record of writing high-quality guidance documentation and standards for enterprise security architecture. * Experience using, managing and configuring platforms such as IriusRisk for automated and manual threat modelling., This vacancy is using Success Profiles , and will assess your Behaviours, Experience and Technical skills., As part of the pre-employment process for this post, successful candidate(s) will be able to agree a contractual workplace from those locations listed in this advert. The agreed contractual workplace is then the substantive and permanent place of work for the successful candidate(s)., Successful candidates must undergo a basic (or equivalent) criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check . ## Description Defra is the UK government department responsible for safeguarding our natural environment, supporting our world-leading food and farming industry, and sustaining a thriving rural economy. Our broad remit means we play a major role in people's day-to-day life, from the food we eat, and the air we breathe, to the water we drink., Defra is looking for an experienced Lead Security Architect to join our Digital, Data, Technology and Security teams. In this role, you will embed "secure-by-design" principles into critical national infrastructure and public-facing services. You will lead our threat modelling capabilities, provide actionable architecture guidance, and partner directly with delivery teams to ensure Defra’s services are secure by design., Identify Threats: * Map data flows, entry points, and system architecture to uncover and analyse potential security gaps across complex environments. Design Mitigations: * Build actionable security controls and mitigation strategies to lower identified risks to acceptable levels. Collaborate Cross-Functionally: * Work directly with solution architects, product managers and project teams to embed secure-by-design standards throughout the delivery lifecycle. Evaluate & Apply Frameworks: * Apply structured methodologies (such as STRIDE or PASTA) to quantify, categorise, and prioritise architectural risks effectively. Document and Automate: * Maintain complete threat lifecycle records and develop automation, scripts, or tooling to scale threat modelling processes across the department. Provide Architectural Guidance: * Author clear, authoritative documentation to support threat modeling functions and internal ways of working., We'll assess you against these behaviours during the selection process: * Communicating and Influencing Technical skills We'll assess you against these technical skills during the selection process: * Analysis - Level: Practitioner * Designing secure systems - Level: Practitioner * Enabling and informing risk-based decisions - Level: Practitioner * Research and innovation - Level: Practitioner * Security technology - Level: Expert * Understanding security implications of transformation - Level: Practitioner, Where the location is ‘National’ the successful appointee should discuss and agree an appropriate contractual location in line with both Defra’s location policy and site capacity, prior to proceeding with pre-employment processes. The agreed amount of time spent at a workplace for this post will reflect the requirement for Civil Servants to spend at least 60% of their working time in an organisation workplace with the option to work the remaining time flexibly from home. Working time spent at a workplace may include time spent at other organisational locations including field-based operational locations, together with supplier, customer or partner locations. This is a non-contractual agreement which is consistent with common Civil Service expectations. Travel costs to non-contractual workplaces will be subject to departmental travel and subsistence policies. Travel costs to contractual workplaces are the responsibility of the employee. Defra includes the core department, APHA, RPA, Cefas and VMD. The successful candidate is required to carry out all their duties from a UK location, and cannot do so from an overseas location at any time. Reserve list A reserve list may be held for a period of 12 months from which further appointments can be made. Childcare Vouchers Any move to DEFRA from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare; for further information visit the Childcare Choices website. Near miss Candidates who are judged to be a near miss at interview may be considered for other positions in Defra which may be at a lower grade, but have a potential skills match., * UK nationals * nationals of the Republic of Ireland * nationals of Commonwealth countries who have the right to work in the UK * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS) * individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020 * Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [The QUEST for Better Software](https://www.wearedevelopers.com/videos/721-the-quest-for-better-software) - [Python-Based Data Streaming Pipelines Within Minutes](https://www.wearedevelopers.com/videos/1233-python-based-data-streaming-pipelines-within-minutes) - [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling) - [Exploring Durable Execution with Python](https://www.wearedevelopers.com/videos/1234-exploring-durable-execution-with-python) - [Why and when should we consider Stream Processing frameworks in our solutions](https://www.wearedevelopers.com/videos/1085-why-and-when-should-we-consider-stream-processing-frameworks-in-our-solutions) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Guide for Expats Living in the UK](https://www.wearedevelopers.com/magazine/355-guide-for-expats-living-in-the-uk) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)