Security Architect

We’re looking for an experienced Security Solution Architect to assess solution designs, identify security risks and threat vectors, and define the controls required before solutions move through architecture and security governance.

12 month contract - upto $1000 per day at 7.5 hours per day

This is a hands-on architecture and assurance role — not a generalist cyber security position.

What you’ll be doing

• Review solution and technical architectures and provide formal security assessment/endorsement.
• Perform security assessments and threat modelling against enterprise security controls and risk appetite.
• Identify security risks and recommend practical remediation and mitigating controls.
• Review penetration testing outcomes and assess remediation requirements.
• Design security controls across Azure, AWS and/or GCP environments.
• Assess security across IaaS, PaaS and SaaS workloads.
• Apply Zero Trust principles to solution designs.
• Work with Risk teams to assess, document and govern security risks.
• Develop security architecture patterns, standards and guidelines.
• Present security assessments, risks and recommendations through architecture and governance forums.

What you need

• 5+ years’ cyber security experience, including hands-on security assessments.
• Strong Security Solution Architecture experience within a large enterprise environment.
• Demonstrated experience reviewing architecture and making security design decisions.
• Strong knowledge of security controls across at least one major public cloud platform: Azure, AWS or GCP.
• Experience securing IaaS, PaaS and SaaS workloads.
• Strong understanding and practical application of Zero Trust.
• Experience with threat modelling, risk assessment and security control design.
• Ability to review penetration-test findings and advise on remediation.
• Strong stakeholder management across architecture, engineering, delivery, risk and business teams.

Particularly relevant

• Experience within financial services or another highly regulated enterprise environment, including familiarity with APRA CPS 234, will be highly regarded.
• Cloud architecture/security certifications and certifications such as CISSP, SABSA or CISA are also advantageous.