How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Principal Security Architect
Sector: Public Sector / Government
Job Title: Principal Security Architect
Type: Contractor
Location: London / Cardiff / Glasgow (hybrid)
Duration: 12 months initial
Vetting: SC/DV security clearance or eligibility
About the Role
As a Software Application Security Architect, you will be responsible for designing and implementing secure software solutions. Your role is pivotal in safeguarding applications from threats, ensuring compliance with security standards, and embedding security into the software development lifecycle.
You will collaborate with development teams, infrastructure architects, and business stakeholders to assess risks, define security requirements, and guide the implementation of robust security controls.
Essential Skills
The successful candidate will possess a strong understanding of the National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) and its application within regulated and business-critical environments. They will have experience assessing, designing and assuring security controls against CAF objectives, including Managing Security Risk, Protecting Against Cyber Attack, Detecting Cyber Security Events and Minimising the Impact of Cyber Security Incidents. The role requires the ability to interpret Indicators of Good Practice (IGPs), conduct security architecture reviews, perform threat modelling and risk assessments, and evaluate the effectiveness of technical and organisational controls in achieving desired security outcomes.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Candidates must be capable of translating CAF requirements into practical architectural and operational improvements, ensuring security is embedded throughout the service lifecycle. This includes experience with secure-by-design principles, identity and access management, cloud and infrastructure security, vulnerability management, security monitoring, incident response and cyber resilience. Strong stakeholder management and communication skills are essential, with the ability to present security risks, assurance findings and remediation recommendations to both technical and senior leadership audiences. Experience of aligning security controls to recognised frameworks such as CAF, NIST and ISO 27001, and supporting audit, assurance and regulatory activities, would be highly desirable.
Key Responsibilities
- Practical experience applying the NCSC Cyber Assessment Framework (CAF).
- Security architecture design and assurance.
- Threat modelling and cyber risk assessment.
- Secure-by-Design and Secure SDLC practices.
- Identity and Access Management (IAM).
- Cloud, application and infrastructure security.
- Security monitoring and incident response.
- Vulnerability and remediation management.
- Security governance, audit and assurance.
- Ability to develop and deliver risk-based security recommendations.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Skills
- Expertise in security architecture and applied security capability.
- Certified to one, more or equivalent of CISSP, GICSP, GRID, SABSA, or TOGAF.
- Knowledge of microservices, containerisation, and cloud-native security models.
- Practitioner in information risk assessment and risk management.
- Experience in Secure by Design (Cabinet Office Guidance) application security, secure software design, and architecture.
- Experience in the process of developing and managing a range of options and decisions aligning with organisational priorities.
- Experience of working in the energy sector.
- Experience in automated security testing.
- Experience with frameworks such as OWASP, NIST, ISO 27001, and CAF.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location