Cyber Security Architect & Engineering Lead

Salary: £40,000 - 80,000 per year

Requirements:

• Were looking for demonstrable experience in cyber security architecture, security engineering, or a closely related senior technical security role.
• We need strong experience designing and implementing security controls in a Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure, and Microsoft Purview.
• Were looking for strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application security, API security, and secure software development.
• We need experience with security architecture reviews, threat modelling, technical standards, reference architecture, and control design.
• Were looking for practical experience in incident response, detection engineering, threat hunting, vulnerability or exposure management, and security automation.
• We need the ability to automate security and assurance processes using tools such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code, or equivalent platforms.
• We expect working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF, and recognised AI security or governance frameworks.
• We need someone able to explain complex technical risk clearly to senior stakeholders and influence delivery teams without relying on formal authority.
• Were looking for a practical, outcome-focused approach and a track record of taking ownership, improving controls, and validating their effectiveness.
• Experience in a regulated, client-confidential, or professional services environment would be advantageous.
• Relevant certifications would be beneficial, including Microsoft Certified: Cybersecurity Architect Expert, SC-100, CISSP, CCSP, Microsoft security certifications such as AZ-500 or SC-200, GIAC certifications in incident response, cloud, detection or forensics, ISO 27001 Lead Implementer or Lead Auditor, or architecture or threat-modelling accreditation such as SABSA or TOGAF (or equivalent practical experience).
• Were looking for a practical problem-solver who is comfortable moving between architecture, configuration, testing, and stakeholder engagement.
• We value someone confident in challenging outdated controls and practices while remaining pragmatic, commercially aware, and focused on business outcomes.
• We need someone calm under pressure, collaborative, and able to build trust with technical and non-technical teams.

Responsibilities:

• Define and maintain our security architecture across identity, endpoints, networks, cloud, SaaS, data, applications, and integration platforms.
• Design and implement modern security controls, focusing on Zero Trust, secure-by-design principles, and automation.
• Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations, and emerging technologies.
• Lead our technical approach to AI security and help establish practical controls for Microsoft 365 Copilot, AI agents, custom AI applications, and related technologies.
• Provide senior technical oversight across security monitoring, detection engineering, incident response, and recovery capability.
• Lead or support responses to complex or high-severity security incidents, working with internal teams, external SOC providers, and specialist partners.
• Improve vulnerability and exposure management by using business risk, exploitability, attack-path context, and threat intelligence to prioritise remediation.
• Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance, and other regulatory or contractual obligations.
• Provide clear, risk-based technical advice to senior leaders, project teams, and technology owners.
• Coach technology teams in secure design and engineering practices, helping build security capability beyond our core security team.
• Translate our security strategy and business requirements into secure designs, practical controls, technical standards, and measurable outcomes.
• Design, prototype, configure, guide implementation, and validate the effectiveness of security controls across identity, cloud, data, endpoints, applications, networks, and third-party services.

Technologies:

• AI
• AI Agents
• API
• Architect
• Azure
• Cloud
• Copilot
• Support
• Microsoft 365
• Network
• PowerShell
• Python
• Security
• TOGAF
• Office 365

More:

At Moore Kingston Smith, were seeking a senior, hands-on Cyber Security Architect & Engineering Lead to help shape and strengthen our future security architecture. This technical leadership role sits within our Information Security team and reports to the Head of Information Security. The role focuses on practical security engineering and architecture, including helping us adopt AI and emerging technologies securely. It is a permanent, full-time position with a hybrid workplace.

last updated 40 week of 2026