Job Title: Cyber Graduate
Job Locations: Portsmouth
Job Type: Permanent/Fulltime
Salary: £33,750
Job ID: 20026
At QinetiQ we are creating a workplace that is inclusive; where our differences are not only embraced but make us stronger. A place where we can connect with each other and benefit from the experiences and thinking from people with varied backgrounds, and at different stages in their careers.
Role Purpose:
Apply cyber security skills and knowledge to risk modelling, audit and compliance, risk and vulnerability analysis and security culture improvement, with guidance and direction from more qualified and experienced staff.
Key Accountabilities:
1. Support creation of business risk models and associated material, in support of operational cyber security and business planning across a range of different domains or sectors using established frameworks (e.g. NIST, UK Government)
2. Support cyber security audit processes in support of operational and business planning activity across a range of different domains or sectors against recognised standards (e.g. ISO27001, UK Government)
3. Support cyber security vulnerability analysis that provides a rich picture of organisational maturity and risk exposure to cyber security, in support of operational and business planning activity across a range of different domains or sectors using established frameworks (e.g. NIST, MITRE ATT&CK, UK Government)
4. Understand mitigations for cyber risk in a given business or operational scenario and threat environment
5. Support development of cyber security risk cases in a given business or operational context
Key Capabilities/Knowledge:
6. Understands threat, vulnerability & cyber risk concepts and can describe some general mitigations and comment on their effectiveness with supporting reasons
7. Awareness of relevant NIST frameworks and ISO27001 standards and how to apply in practice with appropriate supervision
8. Some knowledge of MITRE ATT&CK
9. Awareness of the impact of cyber risk on business or operational outcomes
10. Able to understand regulatory requirements and, with colleagues, devise courses of action to meet these appropriate to the business or operational context.
11. Able to support development of risk mitigation strategies that enhance business outcomes with appropriate supervision
12. Understand cyber risk and mitigations put in place and can provide evidence to help refine risk mitigation approaches with appropriate supervision
13. Able to support identification, documenting and articulation of security risk and mitigation approaches, against technology solutions and business processes
14. Able to engage and communicate with customers at an appropriate level.
15. Able to support engagement and communication effectively with stakeholders at all levels
16. Good awareness of digital technology (in particular computer and computer networks)
17. Some awareness of other cyber security professions and what they contribute
18. Able to articulate evidenced arguments for recommended courses of action
19. Able to work independently with appropriate direction and supervision, seeking guidance where necessary
Experience & Qualifications:
Essential
20. STEM degree or equivalent
21. Experience that demonstrates an inquisitive and questioning approach, willingness to challenge, ability to reason with evidence, and solve problems
22. Digitally literate (including fluency in Microsoft Office tools)
Desirable
23. Experience in a cyber-security role
24. Experience supporting security vulnerability, risk, audit & compliance
25. Experience supporting work with relevant NIST and ISO27001 frameworks and standards.
26. Experience supporting security audit preparation and outcomes
27. Initial membership of CIISec or equivalent
How to apply:
Please fill in the application and include both a CV and a covering letter.
Our Benefits (the list is not exhaustive):
28. On demand learning, access to courses, modules, and lectures via multiple digital learning platforms
29. Coaching and Mentoring
30. 25 days annual holiday excluding bank holiday
31. Matched contribution pension scheme, with life assurance
32. Flexible Benefits package
33. Employee discount portal
34. Employee Assistance Programme
35. Employee-led networks
Security:
Many of our roles at QinetiQ are subject to national security vetting. Applicants who already hold the appropriate level of vetting may be able to transfer it upon appointment, subject to approval. Many roles are also subject to restrictions on access to information, which means factors such as nationality, previous nationalities held and the country in which you were born may impact your role.
Further guidance regarding clearances can be found: UKSV National Security Vetting Solution: guidance for applicants - GOV.UK (www.gov.uk)
Please also be aware that under immigration rules, our Early Careers roles do not meet the legal threshold for candidates who are resident in the UK on student visas.
Recruitment Process:
We want to make sure that our recruitment process is as inclusive as possible and we aspire to bring out the best in our candidates by creating an environment where everyone feels valued, heard and supported. If you have a disability or health condition that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.
QinetiQ is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity, rewards integrity and merit, and where you’ll be empowered to fulfil your potential. We welcome candidates from all background, come and be part of our team!
To find out more about Life at QinetiQ, please see the link:
Closing date for new applications: 5th June 2026
#EC25GJC