Security Architect

The Security Architect (Mythos) will lead the technical definition and operational integration of a defensive capability named Mythos. The role requires ownership of solution design, ensuring Mythos protections are aligned with application and infrastructure stacks, and translating threat models into enforceable controls. The successful candidate will collaborate with engineering, security operations and risk teams to operationalise detection, prevention and response patterns and to measure effectiveness through metrics and testing.

• Define end-to-end security architecture for Mythos across cloud and on-premise environments.
• Design and document protection controls that deliver detection, prevention and mitigation capabilities.
• Integrate Mythos with existing security tooling, SIEMs and SOAR platforms.
• Partner with application and infrastructure teams to embed secure-by-design principles and threat-informed controls.
• Lead threat modelling workshops and map threats to technical controls and monitoring use cases.
• Specify governance, standards and deployment patterns for consistent Mythos implementation.
  

Requirements

• Proven experience in enterprise security architecture and defensive control design.
• Practical knowledge of cloud security patterns (AWS, Azure or GCP) and on-premise infrastructure.
• Experience integrating with SIEM, EDR, and SOAR solutions and defining detection content.
• Strong understanding of threat modelling, MITRE ATT&CK and adversary-informed design.
• Relevant certifications such as CISSP, SABSA, TOGAF or cloud security certificates preferred.
• Excellent stakeholder engagement skills and experience operating within regulated financial services.