Cyber Security Engineer/Architect

Location: London, Bank - 3 days in office.

Details: Initial 6 month contract, with guaranteed conversion to perm within that period.

Perm salary: up to £120k base + bonus (VP Level)

Initial contract rate: TBC

Requirements:

• Design, implement, and maintain enterprise security architectures aligned with business objectives, Zero Trust principles, secure-by-design practices, and industry standards .
• Design and implement Zero Trust and ZTNA solutions , including least privilege, continuous authentication and authorisation, device posture, micro-segmentation, policy-based access, and secure remote access.
• Engineer and manage Identity and Access Management (IAM) capabilities, including RBAC/ABAC, SSO, federation, MFA, conditional access, PAM, identity governance, access reviews, and Joiner-Mover-Leaver processes .
• Develop and implement security solutions across cloud, network, endpoint, identity, application, and data domains, with experience across Azure, AWS, and/or GCP .
• Lead security architecture reviews, threat modelling, risk assessments, vulnerability management, and secure design reviews , translating risks into practical technical controls.
• Implement and integrate cyber security technologies including EDR/XDR, SIEM/SOAR, firewalls, network security, DLP, security monitoring, and threat detection .
• Embed security throughout the SDLC and DevSecOps lifecycle , working with engineering and development teams on secure coding, CI/CD security, secrets management, and application security.
• Support incident response, threat hunting, security investigations, and remediation , using lessons learned and threat intelligence to continuously improve security controls.
• Drive security automation and engineering using scripting, APIs, Infrastructure as Code (IaC), and CI/CD technologies, while evaluating emerging technologies and supporting digital transformation.
• Ensure alignment with relevant regulatory and security frameworks , including ISO 27001, NIST CSF, NIST Zero Trust Architecture, CIS Controls, Cyber Essentials Plus , and applicable UK/EU requirements, while providing technical leadership and mentoring to engineering teams.