Job Description
SC Cleared Security Consultant - 3 days a week on site
As a Security Consultant, you'll assist in the design, build, and delivery of secure digital solutions in highly secure environments. You'll work alongside engineers, architects, and delivery specialists.
You work will include cyber risk management, providing strategic security direction of projects and producing evidence to meet various MOD regulations.
What We're Looking For skills/experience in:
* Working on risk assessments using industry approved methodologies (such as NIST 800-30, ISO 27005).
* Identification of suitable risk management activities (technical, physical, or procedural) to treat/mitigate the identified risks.
* Creation of security documentation to support the development of an information system, these could include: Security Aspects of Design, Risk Assessments, Risk Management Plans, Security Policies, Security Test Plans/Results.
* Support development in a secure-by-design methodology.
* Experience working on technical low-level security designs.
* Knowledge of Legal and regulatory topics that merit consideration when conducting various activities in the field of cyber security.
* Knowledge of MOD policies (JSP 440, 453/604, 892)
* Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environments
* Appreciation of the constraints and requirements imposed on development within secure, safety critical environments.
* Experience of working with MOD Cyber Assurance/Accreditors.
Security Clearance Due to the nature of the work, candidates must be UK sole nationals and hold current SC clearance