Security Operations Architect

Salary: £95,000 - 130,000 per year

Requirements

• Strong written, verbal and presentation skills
• Experience working within Agile, DevOps or Kanban delivery models
• Experience in solution design and development
• Experience working with architecture frameworks, ideally TOGAF
• Experience in developing HLD and LLD documents for security solutions
• Strong understanding of security operations working within or alongside Security Operations Centres
• Experience working in hyperscaler environments, preferably holding Professional Cloud Architect Certification
• Experience with multiple SIEM and SOAR tooling, preferably Google SecOps (formerly Chronicle/Simplify)
• Experience with EDR/XDR and NDR tooling, preferably CrowdStrike, Corelight, and Microsoft Defender XDR

Responsibilities

• Be responsible for the overall design and continuous improvement of our Next-Gen Detection and Response capability for clients
• Provide the bridge between our strategy and the blueprints our engineers build
• Support clients at a business level by helping them evolve and define their operating model, refine processes, and shape technical design and tooling selection
• Research and experiment with different approaches and tooling to keep us at the cutting edge of detection and response
• Decide the best course of action to detect, investigate, and respond to threats
• Develop and establish processes, governance, and ways of working to enable delivery of our target operating model and service catalogue
• Support research activities to maintain our edge in cybersecurity practices
• Work with engineers and threat hunters to analyse dashboard data and continuously improve strategy
• Actively seek to improve and develop new content based on observed security activity
• Lead migration and implementation strategies and plans
• Develop positive working relationships with our teams and client teams

Technologies

• Architect
• Cloud
• DevOps
• Support
• Kanban
• Security
• TOGAF

More

We are Deloitte, and we are shaping strategies and transforming the management of cyber risk. Our cyber practice includes more than 450 talented people in the UK as part of a Technology and Transformation practice of 7,500 people. We offer hybrid working from London or Manchester, with the opportunity to work in local offices, virtual collaboration spaces, client sites, and remotely depending on role requirements. We invest in outstanding people, support wellbeing, inclusion, and development, and we encourage our people to bring their true selves to work while growing their careers in a collaborative, purpose-driven culture.

last updated 35 week of 2026