At a Glance
- Tasks: Design and implement cutting-edge cybersecurity solutions while collaborating with a dynamic team.
- Company: Join an innovative startup consultancy leading the way in cybersecurity.
- Benefits: Remote-first work, competitive salary, and opportunities for professional growth.
- Other info: Inclusive hiring process; we welcome diverse applicants from all backgrounds.
- Why this job: Make a real impact in cybersecurity and shape the future of cloud security architecture.
- Qualifications: Experience with CNAPP platforms and strong knowledge of public cloud technologies.
We are an innovative startup consultancy that specialises in cybersecurity solution architecture, design, and implementation. Our founders bring decades of experience defending high-value assets and systems against the world’s most advanced threats. We add quality and value every step of the way, and we want our people to do the same.
We have an exciting opportunity for a Security Architect (CNAAP) to manage end-to-end solution design and be responsible for delivering architecture design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, you will be required to publish new architecture patterns, key decisions, design deviations, and technical risks and issues where appropriate.
You should be comfortable presenting and sharing solutions at design authorities and senior leadership & stakeholders. Additionally, you will provide technical thought leadership and direction to their aligned projects. You may also stand in as consultants across a wider portfolio within the programme.
Our Security Architect will have:
- Experience in CNAPP platforms such as Wiz, Prisma Cloud, Orca, Lacework, or Aqua Security and their capabilities across CSPM, CWPP, CIEM, DSPM and KSPM.
- Strong knowledge of public cloud platforms.
- Experience with container technologies and orchestration platforms including securing workloads and cluster configurations.
- Strong understanding of Infrastructure as Code (IaC) tools.
- Expertise in CI/CD pipeline integration, including embedding security controls into development toolkits.
- Ability to conduct threat modelling, risk assessment, and design secure architectures for cloud-native applications and workloads.
- Familiarity with runtime protection and workload scanning for VMs, containers, and serverless using CNAPP or CWPP features.
- Experience with identity and access management in the cloud, including least privilege design, CIEM tools, and federated identity models.
- Experience designing cloud-native security reference architectures, patterns, and reusable templates for development and platform teams.
- Familiarity with compliance frameworks and security benchmarks, including CIS, NIST, ISO 27001, and how they apply to cloud-native applications.
Soft Skills:
- Excellent communication and collaboration skills, with the ability to influence cross-functional teams and translate technical concepts to business stakeholders.
- Proactive, solution-oriented mindset with strong problem-solving abilities, a strategic approach to cloud security architecture, and a passion for continuous improvement.
- Uses compelling arguments to gain the support and commitment of others; stepping up to address difficult issues and saying what needs to be said.
- Ability to operate effectively even when things are not certain, or the way forward is not clear; holds self and others accountable to meet commitments.
- Ability to apply knowledge of business and the market to making good and timely decisions that keeps the organization moving forward.
Qualifications & Certifications:
- Bachelors or master’s degree in cybersecurity, computer science, software engineering, or related field.
- CISSP/CISM certification or other broad cybersecurity industry-recognised certificate.
- Architect-level certification in one or more public cloud platforms.
Platform Technology:
- BizzDesign, Archi, or generic UML visualisation experience for high-level designs.
- Working proficiency in Jira for project & tasks management.
- Working proficiency in Confluence for documentation.
Whilst DevNull Security are a remote-first company, our consulting team may be required to travel to a physical site 2-3 times per week (either Edinburgh, Sheffield, Manchester or Glasgow) subject to project/customer requirements.
A career in cybersecurity should be accessible for everyone. We encourage all applicants, regardless of race, ethnicity, gender, age, sexual orientation, disability, or neurotype. We want to ensure our hiring experience is inclusive, fair, and accessible but recognise that as a new company, we might sometimes miss something.
Wiz Talent Pool in Birmingham employer: Dev/Null Security
Dev/Null Security is an exceptional employer that fosters a collaborative and inclusive work culture in the vibrant city of Sheffield. With a strong focus on employee growth, we offer opportunities to influence key decisions and work alongside executives while developing cutting-edge AIOps and observability solutions. Our commitment to innovation and professional development ensures that you will thrive in your role, making a meaningful impact in the tech landscape.
StudySmarter Expert Advice🤫
We think this is how you could land Wiz Talent Pool in Birmingham
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Dev/Null Security, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Dev/Null Security
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Dev/Null Security. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Wiz Talent Pool in Birmingham
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Dev/Null Security insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Dev/Null Security that you’re committed to staying ahead in the game.
How to prepare for a job interview at Dev/Null Security
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Dev/Null Security to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Dev/Null Security.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
