Security Architect

Security Architect

Partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. Translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through to facilitating design sessions with delivery teams and presenting recommendations to architecture review boards and senior stakeholders.

Define a zero-trust approach for a government department, design security controls for a bank's cloud migration, or guide development teams through secure-by-design decisions. Your background in cloud security, application security, and public sector compliance means clients can trust your advice on what works in enterprise environments.

Join our central architecture practice alongside experienced Technology Principals and Solution Architects. Security in delivery teams is often under-served; your role is to change that, not through gates and sign-offs, but by embedding security thinking early and keeping it there. That includes guiding and upskilling delivery teams on secure-by-design practices, helping engineers and product managers build security literacy without slowing down delivery.

Qualifications

Essential Requirements

Designed and validated security architectures for enterprise-scale programmes, across cloud platforms, application security, identity and access management, and system integration. Can point to successful outcomes and take clear ownership of the security design decisions that got there.

Cloud and application security; experience securing workloads on AWS and/or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. Understand AppSec practices including secure SDLC, SAST/DAST tooling, API security, and container security in agile delivery contexts.

Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. Communicate clearly with both technical teams and non-technical leadership.

Highly Desirable

GOV.UK and public sector compliance: experience working within GOV.UK digital standards, GDS service assessments, NCSC guidance, and UK government security classifications (Official, Secret). Familiarity with DSP Toolkit or equivalent assurance frameworks.

Financial services security: experience designing controls for regulated financial environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems.

Security frameworks and standards: working knowledge of NIST CSF, ISO 27001, CIS Controls, or SABSA. Holds or is working towards CISSP, CISM, CCSP, or equivalent.

GenAI security: experience assessing and mitigating risks in AI/ML solution architectures, including data exposure, prompt injection, model supply chain, and output integrity.

Additional Information

Why Version 1?

At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability.

• Share in our success with our Quarterly Performance-Related Profit Share Scheme, where employees collectively benefit from a share of our company's profits
• Strong Career Progression & mentorship coaching through our Strength in Balance & Leadership schemes with a dedicated quarterly Pathways Career Development programme
• Flexible/remote working, Version 1 is tremendously understanding of life events and people's individual circumstances and offer flexibility to help achieve a healthy work life balance
• Financial Wellbeing initiatives including; Pension, Private Healthcare Cover, Life Assurance, Financial advice and an Employee Discount scheme
• Employee Wellbeing schemes including Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee Assistance Programme and much more. Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave and special leave policies
• Educational assistance, incentivised certifications, and accreditations, including AWS, Microsoft, Oracle, and Red Hat
• Reward schemes including Version 1's Annual Excellence Awards & 'Call-Out' platform.
• Environment, Social and Community First initiatives allow you to get involved in local fundraising and development opportunities as part of fostering our diversity, inclusion and belonging schemes.

Version 1 is an equal opportunities employer. We are committed to building a diverse, inclusive and respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring. We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact View email address on click.appcast.io at Version 1. We will consider all requests carefully, respectfully and confidentially.