Cyber Security Engineer – Risk & Assurance,
£81.90 p/hr (inside IR35)
12 months
BAE Systems are currently recruiting for a Cyber Security Engineer – Risk & Assurance, based at our Christchurch site, to support various MoD projects.
This long-term appointment is a complement to the existing 45 strong team that provides support to a fully integrated command and control system for the MoD. This exciting systems & software programme covers many disciplines including design, development, installation, implementation, integration, acceptance, training and logistics support – it is run solely from our Christchurch site for delivery to our customer at various MoD locations.
To fulfil this practical and ‘hands on’ role, it would be beneficial for the candidate to be qualified to diploma or degree level in an engineering discipline.
The role will involve the production of technical artefacts and the implementation of virtual and physical core components, which form the backbone of platforms.
The ideal candidate will be Degree qualified in Information/Cyber Security, IT, Engineering, Mathematics, or Science and or Chartered Cyber Security Professional, ex-NCSC Certified Cyber Professional or ex-CLAS..
Responsibilities:
Our cyber security engineers work closely with security stakeholders from both the business and the customer communities, throughout the whole project lifecycle and at all classifications. In particular:
* Help projects to understand the cyber security risk context.
* Work closely with managers, solution architects and systems engineers to identify and propose architectures, develop secure designs and identify and implement security controls which provide value driven risk reduction.
* Producing clear and concise technical documentation.
* Reporting on progress and providing feedback to team members and leadership.
* Occasional travel to customer sites to support meetings and investigations.
* Identifying cyber security risks and the commensurate controls and achieving assurance / accreditation at the highest classifications and within the UK defence domain.
* An understanding of the current trends and developments in cyber security.
* Ensuring compliance with the NIST Risk Management Framework and NIST Cyber Security Framework or similar frameworks.
* Provide security advice directly to key stakeholders within both the business and the customer community.
* Responsible for planning or participating in CHECK/penetration tests.
* An understanding of the current trends and developments in cyber security
Essential:
* Experience of MOD policy in JSP440 and knowledge of NCSC guidance.
* Experience of working on MoD Secure by Design (SbD) projects
* Subject matter expertise in one or many security processes – such as security risk assessment, risk treatment using security control baselines, etc.
Experience in applying security architecture principles to small or large integration projects.