Job Description:
At DXC we use the power of technology to deliver mission critical IT services that our customers need to modernize operations and drive innovation across their entire IT estate. We provide services across the Enterprise Technology Stack for business process outsourcing, analytics and engineering, applications, security, cloud, IT outsourcing and modern workplace.
About the Role
We are seeking a collaborative Security Architect/Consultant who works alongside the customer to mature their security capability, processes, governance models, and Secure by Design practices across projects and programmes.
You will help assess current approaches, identify opportunities for improvement, and provide practical recommendations that strengthen security while enabling business and delivery objectives.
The role requires strong collaboration skills, a consultative approach, and the ability to translate security requirements into pragmatic and achievable improvements.
Key Responsibilities
- Support the adoption and continuous improvement of Secure by Design practices across customer environments.
- Work with customer stakeholders to review existing security processes, operating models, and governance arrangements.
- Identify opportunities to improve security maturity, efficiency, and consistency across projects and programmes.
- Contribute to the development of security standards, patterns, guidance, and reusable controls.
- Ensure security requirements are considered throughout solution design, delivery, testing, and implementation activities.
- Support the design and review of secure solutions across cloud, infrastructure, application, and data environments.
- Conduct architecture and security reviews to identify risks and provide recommendations for improvement.
- Produce and maintain security architecture artefacts, including:
- High-Level Designs (HLDs)
- Low-Level Designs (LLDs)
- Security Patterns
- Threat Models
- System Security Documentation
- Support assessments against security frameworks and standards such as NIST 800-53, ISO 27001, and NCSC CAF.
- Assist in identifying control gaps and developing remediation and improvement plans.
- Contribute to risk assessments, threat modelling activities, and security design reviews.
- Support assurance and compliance activities through the preparation of security documentation and evidence.
- Help ensure solutions align with customer security policies, regulatory requirements, and industry best practices.
- Act as a trusted security advisor to customer and internal delivery teams.
- Facilitate workshops and collaborative discussions to understand requirements and develop security improvements.
- Present findings, recommendations, and security considerations to both technical and non-technical stakeholders.
- Support architecture review boards, governance forums, and design authority meetings.
- Build strong relationships with customers to understand their challenges and identify opportunities for security enhancement.
- Contribute to the development of security methodologies, templates, standards, and best practices.
- Support awareness sessions and workshops on Secure by Design, security governance, and risk management.
- Share knowledge with colleagues and customer teams to help develop security capability and maturity.
- Promote a culture of continuous improvement and pragmatic security delivery.
Skills, Experience & Qualifications
Essential
- Experience in a Security Architecture, Security Consultancy, or related Cyber Security role.
- Experience supporting the design or review of secure solutions in complex environments.
- Good understanding of security frameworks and standards, including NIST 800-53, ISO 27001, and NCSC guidance.
- Knowledge of cloud, infrastructure, application, and data security principles.
- Experience conducting security assessments, architecture reviews, and risk-based analysis.
- Ability to analyze existing processes and recommend practical security improvements.
- Strong stakeholder engagement and communication skills.
- Experience working within Agile, DevOps, or multidisciplinary delivery teams.
- Ability to produce clear, concise, and well-structured documentation.
Desirable
- Experience working within Defense, or highly regulated environments.
- Familiarity with Secure by Design approaches and security governance models.
- Experience supporting compliance, assurance, or accreditation activities.
- Knowledge of DevSecOps principles and secure development practices.
- Understanding of security operating models and security capability maturity frameworks.
- Industry certifications such as CompTIA A+, Network+, Security+, CrowdStrike, Linux related certifications, Cisco CCNA, Microsoft Certified Azure Fundamentals, AWS Cloud Practitioner, CEH, Palo Alto Cortex XSIAM.
What You Will Deliver
- Security architecture reviews and recommendations.
- Secure by Design improvement plans and maturity assessments.
- Security process and governance model enhancements.
- Architecture artefacts, including HLDs, LLDs, threat models, and security patterns.
- Security control assessments and gap analysis reports.
- Risk assessment outputs and remediation recommendations.
- Security documentation to support assurance and compliance activities.
- Stakeholder workshops, presentations, and advisory recommendations.
- Practical, risk-based improvements that help customers strengthen their overall security posture.
Joining DXC connects you with brilliant people who embrace change and seize opportunities to advance their careers and amplify client success. At DXC, we support each other and work as a team, globally and locally. Our achievements demonstrate how we deliver excellence to our clients and colleagues. You will join a team committed to creating a culture of learning, diversity, and inclusion, dedicated to strong ethics and corporate citizenship.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.
