Security Architect (Threat & Vulnerability)

Dev/Null Security is seeking an experienced Security Architect to own the strategic direction of a broad security domain, its capabilities, technologies, and the business value it delivers across a large, complex organisation.

You'll define, maintain, and own the architecture strategy and roadmaps for your domain, ensuring alignment with wider technology strategies and acting as design authority sponsor for major security initiatives across the group.

You may also lead a team of security solution architects, providing assurance over their designs for technical change while supporting the delivery of new technology and the teams executing your roadmaps. You'll work closely with engineers and developers to promote standardisation, and partner with your security control owner within the CISO's organisation, collaborating across organisational boundaries..

Requirements:

Cybersecurity Expertise:

Significant experience and proven technical depth within threat & vulnerability management and/or application security, such as;

• Vulnerability Scanning: Automated tools to scan systems and networks for known vulnerabilities.
• Penetration Testing: Simulated attacks on systems and applications to identify security weaknesses.
• Threat Modelling: Analysing potential attack vectors and the impact on the organisation's assets.
• Secure Software Development Lifecycle (SDLC): Integrating security practices throughout the software development process.
• Static and Dynamic Analysis: Using static code analysis and dynamic testing to identify security flaws in applications.
• Web Application Firewalls (WAFs): Protecting web applications from common attacks such as SQL injection and cross-site scripting (XSS).
• Input Validation and Sanitisation: Ensuring that inputs are properly validated and sanitised to prevent injection attacks.
• Application Hardening: Applying security measures to reduce the attack surface of applications.
• Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level.
• Experience and understanding of both the roles and interlock between enterprise & solution architecture.
• Experience in both operational and transformation cybersecurity roles or a clear working understanding of both perspectives.
• Experience working in large-scale IT transformation programmes.

Qualifications & Certifications:

• Bachelors or Masters degree in cybersecurity, computer science, software engineering, or related field preferred.
• CISSP/CISM certification or other broad cybersecurity industry-recognised certificate preferred.
• SABSA or TOGAF certified preferred.

Platform & Technology:

• BizzDesign, Archi, or generic UML visualisation experience for high-level designs.
• High proficiency and expertise in Jira for project & tasks management.
• Working proficiency in Confluence for documentation.

Accountabilities and Responsibilities

Architecture & Design:

• Produce, manage, and update enterprise reference architecture including strategies, roadmaps, standards, principles, and capability models.
• Provide assurance, support and oversight of solutions designs and support the engineering teams in delivering and executing strategic technology deployments.
• Ensure solution designs align to published reference architecture.
• Provide technical expertise & consultation to transformative programmes of work within their security domain.
• Influence business and technology executives to help them align their initiatives with standardised offerings whilst also engaging with them to understand their business requirements, threats and risks.
• Clear understanding of both the motivations of the business and technical security.
• Promote strong documentation and clerkship.

Working at DevNull Security

Whilst DevNull Security is a remote-first company, our consulting team may be required to travel to client sites up to 3 times per week, depending on project and customer needs.

We believe that a career in cybersecurity should be accessible to everyone. We actively welcome applicants from all walks of life, regardless of race, ethnicity, gender identity, age, sexual orientation, disability, neurodiversity, socioeconomic background, or any other aspect of identity.

As a growing company, we’re committed to fostering an inclusive, equitable, and accessible hiring experience. We proactively offer adjustments during application and assessment - tell us what you need.