Security Architect

We are a small, thriving company based in Farnborough, delivering proofs of concept and high quality, focused IT consultancy.   

We are looking to recruit an Information Assurance / Security Architect Specialist to join us on fast moving, innovative and influential work that is underway in the Defence and Security Sector.  

As a Security Architect / Information Assurance Specialist in a cutting-edge technology environment, you will have a challenging, vastly interesting, and technically diverse role.  

Flexible Working – 2 days a week in office 

Key Responsibilities and Tasks 

• Risk Management within a Defence and Security Sector;
• Security / Cyber architectures are proportionate to the GSC of the systems;
• Security architectures are delivered in conjunction with other IT Architects and SMEs;
• Apply security design specifics to develop the Security Architecture;
• Strategic direction of Security projects;
• Producing evidence to meet various MOD regulations;
• Designing options and solutions to mitigate vulnerabilities;
• Working with various teams across the business including Software Engineering, DevSecOps Engineering, Infrastructure Engineering, Agile and Cyber Security; and
• Either holds or has recently held government security clearance already, or is suitable for and willing to go through the vetting process (suitability would include an absence of a serious criminal record, a right to work and live in UK and, preferably, a record of 5 years’ UK residency),

Experience (Essential) 

• Able to perform Risk management using industry approved methodologies (such as NIST, IS1). Identification of suitable risk management activities (technical, physical, or procedural) to treat /mitigate the identified risks;
• Support development in a secure by design methodology;
• Be able to work at a technical level with teams;
• Identification / design / selection of appropriate security components to provide security enforcing functions (g. network, endpoints, cryptography, authentication, authorisation, data inspection etc) for a variety of infrastructures including cloud environments;
• Legal and regulatory topics that merit consideration when conducting various activities in the field of cyber security;
• Creation of security documentation to support the development of a system, these could include: security Aspects, Risk Assessment, Risk Management, Security Policies, Security Test Plans/Results, Evaluation documents;
• Knowledge of JSP 604 and creation if assurance artefacts; and
• High standards in written report and design documentation.
    

Experience (Nice to have) 

• Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environments
• Appreciation of the constraints and requirements imposed on development within secure, safety critical environments
• Concepts and technologies that are used to engineer systems which inherently protect systems;
• Understanding of MOD and other departmental IT in defence and security
• Experience of working with MOD Accreditors; and
• Knowledge of Onsite / project tech stack includes but is not limited to Azure, AWS, Docker, Kubernetes, Apache (NiFi, Kafka), NodeJS, Typescript, MongoDB, AI, Machine Learning etc.

Environment and Benefits 

We have modern offices in Cody Technology Park and have well established remote working arrangements. 

For potential employees we offer an attractive range of benefits, including: 

• Exciting and interesting work
• Bonus scheme
• Casual dress
• Free hot and cold drinks in our own, modern kitchen/break-out
• Secure, on-site parking, cafe, restaurant and gym facilities
• Company events & social hours
• Professional Development Opportunities
• Perkbox Employee Benefits system
• Bike to Work scheme
• Competitive Salary & Benefits Package
• Contributory Pension Scheme
• Maternity / Paternity Pay
• Friendly & Supportive Team

About SiXworks 

Founded in late 2017, SiXworks specialises in fail-safe-fast, Agile, innovative design and consultancy to enable organisations rapidly to define requirements and exploit IT opportunities.   

SiXworks’ expertise includes secure-by-design, cloud computing and services, advanced network, platform and infrastructure design, rapid application development, cross-security domain systems, multi-source data platforms, cyber vulnerability mitigation and intelligence systems.  SiXworks provides supplier-agnostic, technical and business consultancy to customers, and champions open-source and best of breed technologies. 

Its people are a combination of senior operational, technical, and business leaders from industry and the armed forces, and the best IT engineers, architects, developers, and project managers. 

To date we have worked exclusively in the Defence and Security Sector, providing IT innovation projects and programmes, analysis, and output-based consultancy.