Security Engineer

Our client, a large government customer, are seeking a Security Engineer to join their team. The role is based in Bristol with some occasional monthly visits to High Wycombe. The role requires SC clearance and candidates must be a sole UK national.

Requirements are scheduled to run until 29/01/2024 and offer a rate up to £530/day

IR35 STATUS: Inside IR35. Our client has indicated that they intend to operate the engagement as Inside IR35. Candidates would be required to operate through an umbrella company on this engagement. The rates above represent rate payable to the umbrella co.

DEADLINE FOR SUBMISSIONS: 12/01/2023 at 08:30

Main Responsibilities

• Act as the focal point for providing assurance that equipment and systems are secure and resilient by design, generating key security artefacts and facilitating effective communication between security stakeholders.
• Coordinate the identification of relevant technical threats and vulnerabilities, ensuring suitable mitigations are selected and implemented in coherence with other engineering and safety requirements.
• Use cyber risk management tools (eg. STREAM) to provide input to the through-life management of Cyber risks and ensure that appropriate expertise is engaged throughout the engineering lifecycle to establish and manage capability resilience risks at the technical level.
• Analyse cyber risks, identifying key themes, commonality, aggregation or systemic risks, ensuring these are bought to the attention of the appropriate risk owner, and developing appropriate responses.
• Ensure the correct application of relevant security policy (including JSP440 and JSP604), and adherence to relevant government, industry and domain standards, guidance and directives for Information Assurance and Cyber.

Qualifications, Registrations and Training

• Stages 1-4 of the Equipment Cyber Resilience Training Pathway.
• CISSP registration (or other relevant industry-recognised registration).
• NCSC Certified Cyber Professional (CCP) registration as Practitioner in one or more roles.
• NCSC CCP registration as Senior Practitioner (optional).

Experience Requirements

• Experienced in delivering in a cyber security or information assurance role developing key artefacts.
• Experienced in systems engineering of complex systems and equipment.
• Experience of working in an acquisition environment.

Candidate Eligibility

Candidates must be eligible to work in the UK, this role will not offer Visa sponsorship. Tier 2 – General visas cannot be accepted.

Other Job Postings

Visit https://quast.workable.com for all current Quast recruitment job vacancies.