Junior Security Architect

Salary: £21,000 - 42,000 per year

Requirements:

• At least three years experience within cyber security, information assurance or security architecture.
• Previous MOD or Defence experience.
• Active SC clearance.
• Strong understanding of security risk and compliance within government environments.
• Experience implementing or assessing Secure by Design principles.
• Knowledge of relevant MOD security policies and standards, including JSP 440, JSP 451 and JSP 453.
• Understanding of government security and assurance frameworks.
• Experience applying Cyber Assessment Framework principles.
• Knowledge of ISO 27001 and wider information security standards.
• Ability to produce and maintain security risk assessments, governance documents and assurance evidence.
• Strong organisation and time-management skills, with the ability to manage multiple applications and deadlines.
• Confident communication and stakeholder-management skills.
• Experience working within Agile or DevSecOps software-development environments.
• Familiarity with the NIST Risk Management Framework.
• Experience using vulnerability and risk-management tools such as DefectDojo or Vigilant.
• Knowledge of GDS delivery phases and government accreditation processes.
• Exposure to AI security, responsible AI practices or JSP 936.
• Experience supporting complex Defence digital programmes.

Responsibilities:

• Support the implementation of Secure by Design principles across digital product teams.
• Maintain security cases and ensure assurance evidence remains accurate and current.
• Conduct continuous security risk assessments using recognised frameworks.
• Maintain product-level risk registers and track security remediation activities.
• Identify and escalate risks that fall outside agreed tolerances.
• Support the preparation of High-Level Designs, security governance documents and through-life management plans.
• Maintain Security Management Plans and supporting assurance artefacts.
• Help prepare a large portfolio of applications for security and architecture review boards.
• Support technical release-readiness assessments across Discovery, Alpha, Beta and Live phases.
• Contribute to Authority to Test, Interim Authority to Operate and Continuous Authority to Operate processes.
• Work closely with product owners, engineers, delivery leads, security assurers and accreditors.
• Support responsible AI governance in accordance with relevant Defence policies.

Technologies:

• AI
• Architect
• DevSecOps
• Support
• JSP
• Security

More:

We are looking for a Junior Security Architect / Security Consultant to support a major UK Defence digital programme developing cutting-edge AI and software applications for national security. The contract is initial, with a rate of up to 500 per day outside IR35. The role is based in High Wycombe with two days onsite per week and three days working remotely. We operate within a Through Life Support function, helping maintain and assure a portfolio of live applications in an Agile DevSecOps environment. This role suits a Security Consultant, Security Analyst or Junior Security Architect looking to develop architecture and assurance experience within a high-profile Defence environment.

last updated 36 week of 2026