At a Glance
- Tasks: Establish security architecture standards and improve the organisation's security posture.
- Company: Dynamic organisation in London focused on infrastructure and network security.
- Benefits: Flexible freelance role with hybrid working options and competitive pay.
- Other info: Opportunity to work with C-suite and influence key security decisions.
- Why this job: Make a real impact by shaping security governance from the ground up.
- Qualifications: Strong network security skills and experience with cloud security architecture.
The predicted salary is between 59400 - 72600 £ per year.
Overview
The organisation currently lacks formal security architecture governance at the infrastructure level — there are no documented security standards guiding network or infrastructure design.
This role will establish that function, ensuring all new infrastructure designs conform to defined security standards and that the organisation’s security posture improves in step with the broader transformation programme.
Responsibilities
- Define and document infrastructure security architecture standards and principles aligned to industry frameworks.
- Review and provide security sign-off on network and infrastructure designs as part of the transformation programme.
- Identify security gaps across the current environment (network, server, voice, hosting) and produce a prioritised remediation roadmap.
- Work with the CISO function to establish technical security policies where none currently exist.
- Evaluate and rationalise the existing security tooling estate (firewalls, network security tools, monitoring).
- Provide guidance on firewall architecture (Palo Alto migration from ASA, segmentation strategy).
- Advise on secure cloud architecture and landing zone design for hybrid/multi-cloud environments.
- Support procurement and vendor selection with security assessment criteria.
- Technical Requirements
- Strong network security architecture skills: firewall design, micro-segmentation, DMZ architecture, east-west traffic control.
- Palo Alto Networks (PA-40 series): policy design, migration from legacy ASA.
- Understanding of regulatory requirements applicable to financial services (FCA, PRA, JFSA reporting obligations).
- Knowledge of security frameworks: NIST, ISO 27001, CIS Controls.
- Cloud security: Azure, AWS security architecture, secure landing zones.
- Vulnerability management, threat modelling, and security risk assessment.
- Experience defining and implementing security policies for hybrid environments.
- Advantageous
- CISSP, CISM, or equivalent professional qualification.
- Experience with network automation and security orchestration.
- Familiarity with SIEM, NDR, or network observability tooling.
- Understanding of trading floor and financial services technology risk.
- Soft skills
- Able to operate without pre-existing governance frameworks and build structure from scratch.
- Pragmatic risk-based approach to security — able to prioritise and communicate trade-offs.
- Strong stakeholder management skills, including engagement with C-suite and regulatory audiences.
- Commercial awareness — able to assess security tooling value and total cost of ownership.
- #J-18808-Ljbffr
Security Architect (Infrastructure & Network Security) - freelance - hybrid, London, UK employer: Comgent
As a Senior Network Engineer in London, you will join a forward-thinking company that values inclusivity and diversity, fostering a collaborative work culture where your expertise in routing and switching will be highly regarded. With opportunities for professional growth and the chance to work on complex network environments, this hybrid role offers a perfect balance of flexibility and engagement, making it an excellent choice for those seeking meaningful and rewarding employment in the tech sector.
StudySmarter Expert Advice🤫
We think this is how you could land Security Architect (Infrastructure & Network Security) - freelance - hybrid, London, UK
✨Get Active on Cybersecurity Forums
Join platforms like Stack Exchange and Reddit’s r/cybersecurity to hang out with industry pros, learn the latest, and share your insights. This will not only boost your visibility but also help you connect with potential clients who might need your freelance services.
✨Show Off Your Skills with Public Projects
Create a few open-source projects or contribute to existing ones that showcase your cybersecurity skills. Use GitHub to display your work, as this is an excellent way to attract clients looking for freelancers with a proven track record.
✨Attend Local Conferences and Meetups
Make sure to hit up cybersecurity meetups, workshops, and conferences in your area. These events are goldmines for networking, and you’ll often find people looking for freelancers after a chat over a coffee – so come prepared with your business cards and a killer elevator pitch!
✨Market Yourself Smartly
Set up a professional website that showcases your portfolio, expertise, and client testimonials. Optimise it for SEO with relevant keywords so potential clients searching for cybersecurity freelancers can easily find you. Don’t forget to link to your site on all your social media and profiles!
We think you need these skills to ace Security Architect (Infrastructure & Network Security) - freelance - hybrid, London, UK
Some tips for your application 🫡
Show Your Skills Through a Strong Portfolio:Since you're applying for a freelance role in cybersecurity, it's crucial to showcase your technical skills through a detailed portfolio. Include case studies of projects you've worked on, any security tools you've developed or assessed, and specifics on the methodologies you’ve used. This will help Comgent understand what you're capable of.
Certifications Matter!:Make sure to list any relevant certifications you hold, such as CISSP, CEH, or CompTIA Security+. Freelance clients often value these credentials as they reflect your expertise and commitment to the field. If you’re actively pursuing more certifications, don’t hesitate to mention that too!
Rates, Availability, and Your Work Style:In your application, it’s essential to be clear about your freelance rates and availability. Clients appreciate transparency. Mention how many hours a week you can dedicate and your preferred working hours, as this sets expectations from the start and shows you're organised and professional.
Tailor Your CV to Highlight Cybersecurity Experience:When crafting your CV, make sure to tailor it specifically to cybersecurity. Highlight projects, tasks, and achievements related to security assessments, vulnerabilities you've mitigated, or compliance work you've undertaken. Keywords relevant to the job can grab attention and increase your chances of landing a spot at Comgent.
How to prepare for a job interview at Comgent
✨Showcase Your Cybersecurity Skills
As a freelancer in cybersecurity, it’s crucial we demonstrate not just our knowledge but our practical skills too. Be ready to discuss specific tools you’ve used, like Wireshark or Metasploit, and share relevant experiences where you identified vulnerabilities or mitigated risks in past projects.
✨Prepare Your Portfolio
Unlike traditional roles, freelancing relies heavily on your portfolio. Let’s curate a selection of past work that showcases our best projects. If we’ve handled penetration tests, audits, or incident responses, be sure to highlight these in your portfolio, and share any client testimonials if we have them.
✨Stay Updated on Trends and Tools
Cybersecurity is an ever-evolving field, so we should be prepared to chat about recent developments and how they impact our work. Familiarise ourselves with the latest threats, tools, and frameworks, like MITRE ATT&CK, that are pertinent to the projects we’re pitching.
✨Pitching Your Value as a Freelancer
When freelancing, we often need to negotiate our rates and value propositions. Be ready to explain how our skills can help Comgent protect their assets and manage risks. It can help to outline some potential strategies or improvements we could implement for them based on their current setup.
