Head of Security Architecture & Engineering

About the role

We are seeking a senior leader to own all technical security capabilities across the organization. The Head of Security Architecture & Engineering will design, engineer, and operate security tools while ensuring 24x7 threat detection and response.

Key responsibilities

• Define and maintain the enterprise security architecture, patterns, guardrails, and reference designs for cloud, infrastructure, data, and applications.
• Lead the design, engineering, reliability, and lifecycle management of security platforms such as SIEM, EDR, NDR, SOAR, PAM, DLP, and email security.
• Oversee the operational management (Control Ops) of core security tools and drive automation and workflow optimisation.
• Integrate security into the Software Development Lifecycle (SDLC) through DevSecOps, SAST, SCA, and security automation.
• Manage security data, analytics, and AI functions to enhance threat detection and response.
• Maintain an inventory of all security technologies, including ownership, licensing, use‑cases, and renewal tracking.
• Translate second‑line‑of‑defence control objectives into concrete technical solutions.

Required profile

• 10+ years of experience in security architecture, engineering, or DevSecOps.
• Proven track record designing security solutions and reference architectures.
• Hands‑on experience with SIEM, EDR, NDR, SOAR platforms.
• Deep knowledge of cloud, application, and infrastructure security.
• Strong understanding of SDLC integration and security automation.
• Bachelor’s degree in Computer Science, Cyber Security, or a related field.
• CISSP certification required; CISSP‑ISSAP, SABSA, GIAC (GSOM, GCIA) or vendor certifications are a plus.

Required skills

• SIEM, EDR, NDR, SOAR
• Cloud security (AWS, Azure)
• Application security, SAST, SCA
• Infrastructure security, PAM, DLP, Email security
• DevSecOps and SDLC integration
• Security automation and workflow orchestration
• Security data analytics and AI
• Security technology selection and lifecycle management