UK jobs. Bigger possibilities.

Lead Security Architect

Hybrid in Bristol·Added yesterday (last checked 11 Oct)

Overview

Job details

  • £58,207 - £64,715 a year

    Gross, as stated in the ad.

    About £3,690 - £4,010 a month after tax.

  • Hybrid

    Only from certain places, per the ad: “The successful candidate is required to carry out all their duties from a UK location, and cannot do so from an overseas location at any time.”

  • Apply by Monday 12 October

    The date the employer’s listing closes.

Requirements

  • Be near Bristol for hybrid days

    No relocation package mentioned.

  • Have senior-level experience

    Lead-level role.

Benefits

  • 25 days holiday + bank holidays

    Paid annual leave, per the ad.

  • 28.97% employer pension

    Paid in by the employer, per the ad. The legal minimum is 3%.

  • Cycle to work and season ticket loan

    Commuter benefits named in the ad.

Skills

Requirements

What we're looking for

  • Proven experience working directly within agile/project delivery environments alongside multidisciplinary software and infrastructure teams.
  • Deep expertise in threat modelling, risk management frameworks (STRIDE, PASTA, or similar), and secure system design.
  • Proven track record of writing high-quality guidance documentation and standards for enterprise security architecture.
  • Experience using, managing and configuring platforms such as IriusRisk for automated and manual threat modelling.

Pay & benefits

What you'll get

£58,207 - £64,715

Grade 7 National: £58,207 - £64,715, plus industry leading pension and benefits.

This post offers successful candidates the opportunity to be considered for an additional Digital, Data and Technology (DDaT) Skills Supplement. The level of the awarded supplement is determined following a separate skills assessment process, the outcome of which has no impact on the decision to make a job offer. This digital capability supplement ranges from £0 to £26,608 and you may be awarded a pay supplement within this range based on results of your additional skills assessment. For details of our pay on appointment policy, please see below under the heading 'Salary'.

A Civil Service Pension with an employer contribution of 28.97%

Alongside your salary of £58,207, Department for Environment, Food and Rural Affairs contributes £16,862 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

  • 25 days leave (rising to 30 days over 5 years) plus bank holidays.
  • A Civil Service pension with an average employer contribution of 28.97%.
  • A day off per year for the King's birthday.
  • Access to a range of retail discounts (these include supermarket, tech, gym, holiday, phone and more).
  • Flexible working options such as condensed hours, part-time and flexi time.
  • 3 paid volunteering days per year.
  • Funding for professional membership of a recognised professional body.
  • Learning and development tailored to your role and budget for training or qualifications.
  • A culture encouraging inclusion and diversity.
  • Cycle to work scheme.
  • Health cash plan to help you manage health costs for a reduced monthly fee.
  • Access to the Employee Assistance Programme open 24 hours, 7 days a week, that provides support to you during any times of stress or difficulty.
  • Free access to Headspace for wellbeing.
  • Season ticket loan for public transport.

New entrants to the Civil Service are expected to start on the minimum of the pay band. The internal roles rules apply to existing Civil Servants, i.e. level transfers move on current salary or the pay range minimum, transfers on promotion move to new pay range minimum or receive 10% increase. Either case is determined by whichever is the highest.

Any move to DEFRA from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare; for further information visit the Childcare Choices website.

Visa & relocation

Please take note that Defra does not hold a UK Visa & Immigration (UKVI) Skilled Worker License sponsor and are unable to sponsor any individuals for Skilled Worker Sponsorship.

This job is broadly open to the following groups:

  • UK nationals
  • nationals of the Republic of Ireland
  • nationals of Commonwealth countries who have the right to work in the UK
  • nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
  • nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
  • individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
  • Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

The role

Defra is looking for an experienced Lead Security Architect to join our Digital, Data, Technology and Security teams. In this role, you will embed "secure-by-design" principles into critical national infrastructure and public-facing services. You will lead our threat modelling capabilities, provide actionable architecture guidance, and partner directly with delivery teams to ensure Defra's services are secure by design.

What you'll do

Identify Threats:

  • Map data flows, entry points, and system architecture to uncover and analyse potential security gaps across complex environments.

Design Mitigations:

  • Build actionable security controls and mitigation strategies to lower identified risks to acceptable levels.

Collaborate Cross-Functionally:

  • Work directly with solution architects, product managers and project teams to embed secure-by-design standards throughout the delivery lifecycle.

Evaluate & Apply Frameworks:

  • Apply structured methodologies (such as STRIDE or PASTA) to quantify, categorise, and prioritise architectural risks effectively.

Document and Automate:

  • Maintain complete threat lifecycle records and develop automation, scripts, or tooling to scale threat modelling processes across the department.

Provide Architectural Guidance:

  • Author clear, authoritative documentation to support threat modeling functions and internal ways of working.

How you'll work

Permanent

Flexible working, Full-time, Job share, Part-time

Bristol, Newcastle-upon-Tyne, Reading, Warrington, York

As part of the pre-employment process for this post, successful candidate(s) will be able to agree a contractual workplace from those locations listed in this advert. The agreed contractual workplace is then the substantive and permanent place of work for the successful candidate(s).

Where the location is 'National' the successful appointee should discuss and agree an appropriate contractual location in line with both Defra's location policy and site capacity, prior to proceeding with pre-employment processes.

The agreed amount of time spent at a workplace for this post will reflect the requirement for Civil Servants to spend at least 60% of their working time in an organisation workplace with the option to work the remaining time flexibly from home. Working time spent at a workplace may include time spent at other organisational locations including field-based operational locations, together with supplier, customer or partner locations. This is a non-contractual agreement which is consistent with common Civil Service expectations.

Travel costs to non-contractual workplaces will be subject to departmental travel and subsistence policies. Travel costs to contractual workplaces are the responsibility of the employee.

Defra includes the core department, APHA, RPA, Cefas and VMD.

The successful candidate is required to carry out all their duties from a UK location, and cannot do so from an overseas location at any time.

Reference number

481531

Job grade

Grade 7

Type of role

Architecture and Data
Digital
Information Technology

Number of jobs available

1

Behaviours

We'll assess you against these behaviours during the selection process:

  • Communicating and Influencing

Technical skills

We'll assess you against these technical skills during the selection process:

  • Analysis - Level: Practitioner
  • Designing secure systems - Level: Practitioner
  • Enabling and informing risk-based decisions - Level: Practitioner
  • Research and innovation - Level: Practitioner
  • Security technology - Level: Expert
  • Understanding security implications of transformation - Level: Practitioner

Job contact :

  • Name : DDTSonPayrollRecruitment@defra.gov.uk
  • Email : DDTSonPayrollRecruitment@defra.gov.uk

Share this page

Hiring process

Apply before 11:55 pm on Monday 12th October 2026

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

The Civil Service marks each element of the selection process on a merit basis. You can visit the gov.uk website for further information on the Civil Service rating scale.

Ensure you have tailored your CV and Personal Statement to the 'skills and experience' section of the job advert by providing examples on how you are suitable for the role using the STAR method.

Please ensure you demonstrate clearly, within your personal statement, how you meet these requirements, as the information you provide will form a key part when the panel is scoring your application.

For further information on STAR, you can check out our Hints and Tips document.

As part of the application process, you will be assessed on your experience. This will be evaluated by looking at your CV and personal statement, so please provide the following and ensure your experience is clearly demonstrated:

A CV
A 750-word Personal Statement: Referring to the 'skills and experience' sections of the job advert, please demonstrate how you are suitable for the role by providing relevant examples.

Further details around what this will entail are listed on the application form.

Sift will begin shortly after the advert closes.

Should there be a large number of applications, an initial sift will be conducted using your personal statement. Candidates who pass the initial sift may be progressed to a full sift, or progressed straight to assessment or interview.

If successful at sift, you will be invited to an interview where you will be assessed on the Behaviours and Technical Skills listed below, as well as Experience.

Interview dates are to be confirmed. Please note that these may be subject to change.

Interviews will be held face-to-face in our London office, further details will be provided if invited to interview.

For further information on Success Profiles, you can visit the links below and watch our videos on DefraJobs.

Behaviours

Experience

Technical Skills

A reserve list may be held for a period of 12 months from which further appointments can be made.

Candidates who are judged to be a near miss at interview may be considered for other positions in Defra which may be at a lower grade, but have a potential skills match.

Where more than one location is advertised, candidates will be posted in merit order by location. You will be asked to state your location preference on your application.

Feedback will only be provided if you attend an interview or assessment.

About Department for Environment, Food & Rural Affairs (Defra)

Industry
Government Administration
Website
gov.uk

In their own words

About the company & team

DEFRA - DGCS - Digital, Data, Technology & Security

Defra is the UK government department responsible for safeguarding our natural environment, supporting our world-leading food and farming industry, and sustaining a thriving rural economy. Our broad remit means we play a major role in people's day-to-day life, from the food we eat, and the air we breathe, to the water we drink.

Digital, Data, Technology and Security (DDTS) is the trusted team for digital across the entire Defra Group.

We have around 1000 colleagues across DDTS and our ambition is to make it easier and faster than ever for people to interact with Defra. If you are ready to drive innovation and push boundaries, we want to hear from you. Join us and together we will create a great place for living, and a green and healthy future for all.

Find out more about DDTS:

Defra digital, data and technology blog

LinkedIn

Defra Jobs

We are Government Digital and Data Candidate Information Pack V3 - 1

  • Email : defrarecruitment.grs@cabinetoffice.gov.uk

Additional information

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.

If you need a change to be made so that you can make your application, you should:

Contact Government Recruitment Service via defrarecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.

Complete the 'Assistance required' section in the 'Additional requirements' page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you're deaf, a Language Service Professional.

If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'contact point for applicants' section.

All of these posts require the successful candidate to hold SC security clearance. Job offers to these posts are made on the basis of merit. Security vetting will only take place after the receipt of a job offer.

For further information on National Security Vetting please visit the Demystifying Vetting website.

If successful and transferring from another Government Department a criminal record check may be carried out.

In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf.

However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant's details held on the IFD will be refused employment.

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.

Successful candidates must undergo a basic (or equivalent) criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.

The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction..

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

If you feel your application has not been treated in accordance with the Recruitment Principles and you wish to make a complaint, in the first instance, you should contact Government Recruitment Services via email: defrarecruitment.grs@cabinetoffice.gov.uk
If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission: here

All open roles at Department for Environment, Food & Rural Affairs (Defra)

Chief Financial Officer (CFO), PackUK

Department for Environment, Food & Rural Affairs (Defra)1d ago
£86k – £117.8k a yearLondon

Decontamination Engineering Manager

Department for Environment, Food & Rural Affairs (Defra)1d ago
£64k – £71.2k a yearHybrid in South East EnglandCycle to workSeason ticket loan

Deputy Director - Strategic Change

Department for Environment, Food & Rural Affairs (Defra)1d ago
£86k – £117.8k a yearLondon

Lead Product Manager

Department for Environment, Food & Rural Affairs (Defra)1d ago
£67.7k – £75.5k a yearHybrid in BristolCycle to workSeason ticket loan

ODA and International Biodiversity Funds Deputy Director

Department for Environment, Food & Rural Affairs (Defra)1d ago
£86k a yearLondon

Portfolio Manager

Department for Environment, Food & Rural Affairs (Defra)1d ago
£64k – £71.2k a yearHybrid in LondonCycle to workSeason ticket loan

Restructure, Redeployment and Redundancy Lead

Department for Environment, Food & Rural Affairs (Defra)1d ago
£64k – £71.2k a yearHybrid in London

Solution Architect - ServiceNow

Department for Environment, Food & Rural Affairs (Defra)1d ago
£62k – £69.1k a yearHybrid in BristolCycle to workSeason ticket loan

Team Lead Metrics and Reporting

Department for Environment, Food & Rural Affairs (Defra)1d ago
£64k – £71.2k a yearHybrid in London

Business Support Officer

Department for Environment, Food & Rural Affairs (Defra)1d ago
£34.4k – £35.5k a yearHybrid in London

Commercial Officer (Corporate Solutions)

Department for Environment, Food & Rural Affairs (Defra)1d ago
£40.1k – £42.6k a yearHybrid in London
See all 19 jobs