Application Security Architect (SC Clearance Required)

About the role

Investigo is seeking an experienced Application Security Architect to support a major government organisation during a critical delivery phase of a transformation programme. The role requires an active Security Check (SC) clearance and will focus on embedding security across the service lifecycle.

Key responsibilities

• Interpret and apply the NCSC Cyber Assessment Framework (CAF) to design and assure security controls.
• Conduct security architecture reviews, threat modelling and cyber risk assessments.
• Translate CAF requirements into practical architectural and operational improvements.
• Provide guidance on secure‑by‑design principles, Secure SDLC, and IAM implementations.
• Oversee cloud, application and infrastructure security, vulnerability management and remediation.
• Support security monitoring, incident response and cyber resilience activities.
• Engage with senior leadership to present risks, assurance findings and remediation recommendations.

Required profile

• Active SC clearance (no sponsorship).
• Strong experience with the NCSC CAF and its application in regulated environments.
• Proven ability to design security architecture and perform threat modelling.
• Excellent stakeholder management and communication skills.

Required skills

• NCSC Cyber Assessment Framework (CAF)
• Threat modelling and cyber risk assessment
• Secure‑by‑design and Secure SDLC practices
• Identity and Access Management (IAM)
• Cloud, application and infrastructure security
• Security monitoring and incident response
• Vulnerability management and remediation
• Security governance, audit and assurance (ISO 27001, NIST)