Cyber Security Architect (9 month FTC) in Cambridge

For over 20 years, Abcam has been providing tools the scientific community needs to enable faster breakthroughs in critical areas like cancer, neurological disorders, infectious diseases, and metabolic disorders. We believe that to continue making progress, we need to work together in new ways. We need your own unique perspective as well as this of our people to make an always greater impact on the world. This community needs people like you: dedicated, agile and above all audacious so we can truly bring progress forward.

As a Cyber Security Architect, you would join the Abcam Digital Cyber Security team. The Global Cyber Security function has overall responsibility for security operations, risk and assurance as well as strategic oversight and management of the Abcam information security management system.

The security architect's role will work in close relationship with Abcam Architecture Team but also inter-departmentally and internationally to provide timely, secure, resilient and cost-efficient solutions that meet the business need and elevate Abcam’s security posture. The security architect is expected to possess advanced analytical skills, along with knowledge to define and support architecture, engineering and design principles. You would be highly technical and proficient in cybersecurity workings of cloud systems (IaaS, PaaS and IaaS) as well as traditional technology stacks. Demonstrated experience with AWS and Microsoft Azure is a requirement.

A successful candidate in this role will be demonstrating strong critical thinking skills needed to manage complex systems and applications, be adept at working with business units and have good listening and communication skills.

What you are to be responsible for:

• Own the cyber security architecture stream of work
• Architect, design and implement scalable, resilient solutions in public, private and hybrid clouds
• Support enterprise and solutions architects by clearly defining and documenting security controls requirements
• Work with Danaher corporate security function to define, document, socialize and continuously improve Abcam’s security patterns and standards
• Recommend and advise on strategies and best practices for cybersecurity and a flexible architecture
• Integrate and automate secure continuous integration/continuous delivery build configurations for development pipelines
• Assist with strategy, implementation and recovery point/time objective for business continuity and disaster recovery
• Work in tandem with team leads and subject matter experts to validate configurations are aligned, adopted and implemented
• Own the cyber security element of the Architecture review board (ARB) process, attend ARB meetings as well as Change Approval board meetings
• Work closely with the business and attend project and implementation meetings and advise on secure application and infrastructure configurations in a structured and documented manner

Skills:

• In-depth and practical understanding of cyber security best practices, standards
• Ability to influence technical team and business units and collaborate to reduce attack surface
• Capacity to comprehend complex technical infrastructure, managed services and third-party dependencies
• Applicable knowledgeable as needed about GDPR, PCI, SOX, CCPA, ISO 27001, NIST 800-53
• Proven use with zero trust network access, encryption, perimeter security controls, OS security controls, data protection, vulnerability management, API security, Identity, SIEM, EDR, SBoM security, Cloud native security controls
• Functional use with cloud posture management, cloud-native and traditional security controls
• Working knowledge of common threats including but not limited to malware, phishing, ransomware, DDOS, web & mobile application security risks
• Working knowledge with patching and vulnerability management practices
• Excellent written and oral communication skills across varying levels of the organization

Qualifications:

• Experience in a similar role is highly desirable
• Bachelor’s degree in cyber security, computer science, engineering or related field
• Experience with TOGAF or SABSA
• Preferably one or more certifications such as GCSA, CCSP, CCSK or CISSP, or one offered by AWS or Microsoft.

We know that when it comes to benefits, no one size fits all. Flexibility and choice matter which is why in addition to market competitive salaries, we offer you a flexible benefits package which is tailored to your unique needs and support your financial, physical and emotional wellbeing. This includes 18 weeks fully paid maternity leave, 6 weeks fully paid paternity leave as well as highly flexible working and much more. Besides, your development will be integral to your experience here. You will grow alongside other talented minds, in ways you may often find unexpected. When people come together, incredible things happen. Here you’ll work in a safe environment where you can be who you truly are. We’ll champion and celebrate your uniqueness throughout your journey with us. This is how we excel at partnering with the scientific community no matter the challenge, ultimately helping solve the world’s most critical diseases.