Conducting analysis of and delivering consultancy on the security posture of complex system architectures.
* Working with the wider Security Architecture team to define and maintain functional security requirements for solution architectures and develop methodologies for defining and maintaining non-functional security requirements for solution architectures.
* Collaboratively working with other architect disciplines and technical colleagues to deliver a security viewpoint on architectures that will inform the design while ensuring security requirements are met.
* Collaboratively working with other security experts, including Information Assurance consultants, accreditors, analysts and penetration testers to inform secure architectural design that meets all relevant governance requirements.
* Possess an understanding of, and (when required) be able to lead security-related project delivery elements, including detailed technical levels as well as higher level project views.
* Apply detailed knowledge of the current cybersecurity threat landscape, technical vulnerabilities and attack methodologies to the design of complex architectures.
Responsibilities and Requirements
* As an experienced Cyber Security Solution Architect, you'll have extensive and demonstrable knowledge and experience of security, cloud, and network technology.
* You'll be able to work closely with Technology, business, and vendor stakeholders to determine security requirements creating secure designs for security specific as well as business systems.
* You'll be used to using threat-modelling techniques and tooling to drive security-by-design principles and minimise risks to Asda.
* You'll have a drive and enthusiasm to work collaboratively with the other architects to define and deliver solutions which balance security with business needs and cost-effectiveness.
* You'll need to be flexible and work with agility. Pace is important but not at the expense of quality and well-designed solutions and well-governed processes.
* Experience applying architectural frameworks (e.g. SAFe, CSTAR, TOGAF, SABSA, BSIMM).
* A sound understanding of Information Assurance Frameworks. (e.g. CIS, CSA-CCM, NIST, PCI)
* Good technical knowledge and experience across Microsoft platforms and technologies. (e.g. Azure, Office365, Windows 365, Defender)
* Extensive experience in Networks, Data Centre Systems, and cloud architecture (application, data and infrastructure) - including IaaS, PaaS and SaaS security.
* Knowledge of virtual and physical networking, including routing, switching, firewalls, DNS, DHCP, IP, Encryption.
* Experience in building and secured resources within Azure and other leading cloud platforms for a FTSE 100 or similarly sized organisation and their vendor partners.
* Knowledge is expected to include container / cluster-based solutions.
* Knowledge and experience in performing threat modelling techniques and tooling to drive security-by-design.
* Experience identifying cybersecurity risks and developing proportionate mitigations in solution designs.
* Strong knowledge of approaches for Identity Management and federation including SSO options.
* Ability to engage with a cross-section of stakeholders, both technical and non-technical.
* An ability to make security recommendations in the context of wider business requirements such as efficiency, resilience and confidence.
* Experience working with DevOps and DevSecOps orientated environments.
* Knowledge of Application Security Engineering where possible experience in designing and deploying security solutions for CI/CD pipelines including Agile orientated pipelines.
* Demonstrate Drive and Passion for cybersecurity and enthusiasm for spreading knowledge across the business.
* Excellent written and verbal communication skills.
Benefits
* Discretionary company bonus
* Company pension up to 7% matched
* Company Car allowance of £5,700
* 15% colleague discount in store and online
* Free access to wellbeing services such as Wagestream, 24/7 virtual GP, counselling, health and dental cash plans and a 24/7 employee assistance helpline, alongside discounts across a range of services and activities, from airport parking, enhanced to theme parks and cinemas.
* Asda Allies Inclusion Networks - helping colleagues to make sure everybody is included and that our differences are recognised and celebrated
* Excellent parental leave policies, including maternity & adoption leave, paternity leave, shared parental leave, neonatal care leave, and support for those doing fertility treatments.
We want all colleagues to be able to bring their best and true selves to work, every day. Simply put, we want our colleagues to be Proud to be Asda and proud to be themselves
#J-18808-Ljbffr