NineTech
Network Security Cyber Architect
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Network Security & Cyber Defence Architect
12 Months
UK REMOTE
£780 PER DAY
Role Overview
Provide senior Network Security and Cyber Defence architecture leadership and delivery capacity, driving the modernisation of network security controls, secure access, perimeter protection, security monitoring, detection and response capabilities.
Working in close partnership with the relevant domain owners, the architect will translate strategic security requirements into pragmatic target architectures, patterns, roadmaps and governed delivery outcomes across Network Security, Cyber Defence, Security Monitoring and Proactive Defence.
The role will operate across architecture governance, engineering and security operations, ensuring that security capabilities are designed for effectiveness, resilience, operational integration and measurable risk reduction.
Key Responsibilities
Network Security Architecture
-
Provide architecture leadership and delivery support across:
- DNS / IPAM governance and hygiene (NET-001)
- NAC standardisation and posture-based access control (NET-002)
- Proxy modernisation and Bluecoat migration (NET-003)
- IDS governance and SIEM / SOC integration (NET-005)
- Wireless configuration standardisation and security assurance (NET-006)
- Firewall improvement and control-effectiveness uplift (NET-007)
- Zero Trust remote-access modernisation (NET-008)
-
Develop target-state architectures, reference designs, security patterns and transition roadmaps for network-security capabilities.
-
Assess existing network-security controls for effectiveness, resilience, coverage and alignment to security architecture principles.
-
Ensure network-security designs integrate effectively with SOC, SIEM, detection, incident response and cyber-containment capabilities.
-
Drive consistent security architecture across perimeter, north-south and east-west traffic flows, remote access, third-party connectivity and network containment.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Cyber Defence & Security Monitoring Architecture
- Produce the architecture support pack for SIEM, SOAR and security-data-pipeline evolution, including Cribl deployment and target-state security telemetry and data flows.
- Provide architecture assessment and governance support for:
- Incident Response & Management
- Digital Forensics & Incident Response (DFIR)
- Threat Detection & Response (TDR)
- Endpoint security
- Cyber containment and isolation
- Develop the target architecture for Cyber Deception capabilities.
- Support UEBA and threat-intelligence enrichment, including integration with OpenCTI and associated security-data flows.
- Strengthen the integration between network telemetry, endpoint telemetry, threat intelligence, SIEM/SOC, detection engineering, SOAR and incident-response capabilities.
- Define and improve architectures that enable scalable, high-quality telemetry, effective detection and automated response.
Proactive Defence & Security Engineering
-
Support architecture across proactive-defence workstreams, including:
- Threat & Exposure Management scale-up
- Advanced Product Security, including agentic-AI-enabled penetration testing
- Enhanced Automated Security Testing
- Vulnerability Management optimisation
-
Assess and evolve security capabilities to improve preventative controls, attack-surface visibility, detection coverage and speed of remediation.
-
Ensure proactive-defence capabilities are integrated into the wider Network Security and Cyber Defence target architecture.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Security Architecture Patterns & Standards
-
Refresh and develop Network Security architecture patterns, including:
- DNS / DDoS Protection
- Secure Connectivity
- East-West Traffic Control
- Perimeter Modernisation
- Network Containment
- Secure Third-Party Access
-
Develop and maintain Cyber Defence & Security Monitoring patterns, including:
- Detection-as-Code
- SIEM Onboarding
- SOAR Automation
- Telemetry Quality
- Threat Intelligence Integration
- DFIR Integration
- Alert Enrichment
-
Ensure patterns are practical, reusable and aligned to enterprise security architecture standards and technology roadmaps.
Architecture Governance & Delivery
- Lead or contribute to architecture reviews, design authorities and security governance forums.
- Maintain clear control-to-capability traceability, architecture decision records, assumptions, risks, exceptions and dependencies.
- Produce high-quality architecture packs, reference architectures, pattern artefacts, decision papers and delivery handover packs against agreed templates.
- Translate complex technical and security requirements into clear architectural decisions and actionable delivery outcomes.
- Work buddy-paired with relevant domain owners, providing additional senior architecture capacity while maintaining clear ownership boundaries.
- Support engineering and delivery teams through implementation, ensuring architectural intent is maintained through to production.
- Identify architectural gaps, control weaknesses, technical debt and opportunities for security capability.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location