Security Architect

We are seeking an experienced Security Architect / Security Lead to drive the organisation's security strategy across Application Security, Network Security, and Cloud Security, with a strong focus on AWS environments. The ideal candidate will be responsible for designing, implementing, and governing enterprise security controls, ensuring secure software development practices, cloud security compliance, and robust network defence mechanisms. This role requires a hands-on security leader who can collaborate with engineering, DevOps, infrastructure, and compliance teams to build and maintain a secure technology landscape.

The candidate will have responsibilities across the following functions:

Cloud Security (AWS):

• Design and implement security architecture for AWS-based environments.
• Ensure secure deployment and configuration of AWS services, including EC2 VPC, IAM, S3 RDS, EKS/ECS, Lambda, CloudTrail, GuardDuty, Security Hub, and WAF.
• Implement cloud-native security controls and monitor cloud security posture.
• Conduct cloud security risk assessments and compliance reviews.
• Support infrastructure-as-code security and DevSecOps initiatives.

Network Security:

• Design and maintain secure network architectures and segmentation strategies.
• Manage and review firewall, WAF, IDS/IPS, VPN, and Zero Trust security controls.
• Perform network security assessments and recommend remediation strategies.
• Ensure secure connectivity between on-premises and cloud environments.

Application Security:

• Define and implement secure SDLC practices across development teams.
• Conduct threat modelling, secure design reviews, and security architecture assessments.
• Lead application security testing activities, including SAST, DAST, SCA, and penetration testing.
• Identify and remediate vulnerabilities in web, mobile, and API-based applications.
• Establish application security standards, policies, and best practices.

Governance, Risk and Compliance:

• Develop security policies, standards, and architecture frameworks.
• Conduct security risk assessments and provide mitigation recommendations.
• Support compliance initiatives such as SOC 2 ISO 27001 PCI-DSS, HIPAA, or similar frameworks.
• Participate in security audits and regulatory reviews.

Leadership and Collaboration:

• Serve as a security advisor to engineering and business stakeholders.
• Lead incident response and root-cause analysis for security events.
• Mentor security engineers and promote security awareness across teams.
• Drive security architecture reviews for new applications, infrastructure, and cloud initiatives.

Requirements:

• Bachelor's degree in Computer Science, Information Security, or related field.
• 8+ years of experience in Information Security with expertise in Application Security, Network Security, and Cloud Security.
• Strong hands-on experience securing AWS cloud environments.
• Deep understanding of OWASP Top 10 secure coding practices and modern application architectures.
• Strong knowledge of network security technologies, protocols, and architectures.
• Experience with vulnerability management, security assessments, and threat modelling.
• Familiarity with DevSecOps practices and CI/CD security integration.
• Experience with security monitoring and incident response.
• Preferred Certifications: AWS Certified Security - Speciality, CISSP, CCSP, CISM, CEH, AWS Solutions Architect (Associate/Professional).

Technical Skills:

• AWS Security Services (IAM, GuardDuty, Security Hub, CloudTrail, WAF, KMS).
• Application Security Tools (SAST, DAST, SCA).
• SIEM and Security Monitoring Solutions.
• Network Security (Firewalls, IDS/IPS, VPN, WAF).
• Container and Kubernetes Security.
• Infrastructure as Code Security (Terraform, CloudFormation).
• Threat Modelling and Risk Assessment.
• Vulnerability Management Tools.

Good to Have:

• Strong security architecture and leadership capabilities.
• Ability to balance security requirements with business objectives.
• Excellent stakeholder management and communication skills.
• Hands-on problem solver with a proactive security mindset.