Cyber Security Architect & Engineering Lead
About this role
We are looking for a senior, hands-on Cyber Security Architect & Engineering Lead to help shape and strengthen our future security architecture at Moore Kingston Smith.This is a technical leadership role, sitting within our Information Security team and reporting to the Head of Information Security. You will be responsible for translating security strategy and business requirements into secure designs, practical controls, technical standards and measurable outcomes.This is not a purely advisory or compliance-focused position. We are looking for someone who can design, prototype, configure, guide implementation and validate the effectiveness of security controls across identity, cloud, data, endpoints, applications, networks and third-party services.A key part of the role will be helping the firm adopt AI and emerging technologies securely, including Microsoft 365 Copilot, AI agents, custom AI applications and data-driven platforms. Define and maintain security architecture across identity, endpoints, networks, cloud, SaaS, data, applications and integration platforms.Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation.Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies.Act as the technical lead for AI security, helping to establish practical controls for Microsoft 365 Copilot, AI agents, custom AI applications and related technologies.Provide senior technical oversight across security monitoring, detection engineering, incident response and recovery capability.Lead or support the response to complex or high-severity security incidents, working with internal teams, external SOC providers and specialist partners.Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation.Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual obligations.Provide clear, risk-based technical advice to senior leaders, project teams and technology owners.Coach technology teams in secure design and engineering practices, helping to build security capability beyond the core security team. We are looking for someone with demonstrable experience in cyber security architecture, security engineering or a closely related senior technical security role.You will need:Strong experience designing and implementing security controls in a Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview.Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application security, API security and secure software development.Experience of security architecture review, threat modelling, technical standards, reference architecture and control design.Practical experience across incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation.Ability to automate security and assurance processes using tools such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms.Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security or governance frameworks.The ability to explain complex technical risk clearly to senior stakeholders and influence delivery teams without relying on formal authority.A practical, outcome-focused approach, with a track record of taking ownership, improving controls and validating that they work effectively.Experience in a regulated, client-confidential or professional services environment would be advantageous.Desirable certificationsRelevant certifications would be beneficial, such as:Microsoft Certified: Cybersecurity Architect Expert, SC-100CISSP or CCSPMicrosoft security certifications such as AZ-500 or SC-200GIAC certifications in incident response, cloud, detection or forensicsISO 27001 Lead Implementer or Lead AuditorArchitecture or threat-modelling accreditation such as SABSA, TOGAF or equivalent practical experienceAbout youYou will be a practical problem-solver who is comfortable moving between architecture, configuration, testing and stakeholder engagement. You’ll be confident challenging outdated controls and practices, while staying pragmatic, commercially aware and focused on business outcomes.You’ll also be calm under pressure, collaborative in your approach and able to build trust with both technical and non-technical teams.If interested please download the full job spec.
What this role is, and what else it is called
Employers in London advertise this kind of work as Security Engineer, Cyber Security Consultant, IT Security Analyst and Junior Penetration Test Engineer too, so it is worth searching more than one wording. It is a lead or principal Cybersecurity role in London, advertised as hybrid, splitting time between home and the office.
About hiring at Mooreks
Mooreks appears alongside 2 other live technology roles on this source domain. Among 3 roles with a known arrangement, 0% are fully remote and 100% hybrid. Where Mooreks states an annual salary, the median advertised range midpoint is £50,000 across 3 roles. See all Mooreks roles, salaries and stack.
How this role compares to the market
London has 1,335 live IT vacancies across 689 source domains, with a median annual salary midpoint of £55,000. Browse London roles.
Lead and principal roles make up 848 of the live UK IT market and have a median annual salary midpoint of £50,321.
Market figures are today's snapshot of reportable live UK roles on public careers and vacancy pages; see hiring trends.
Detected on Mooreks's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site. More IT jobs in London.