Job summary

We are looking for a Cyber Security Engineer for a major MoD Project.

Key skills required for this role

Cyber Security Engineer

Important

Cyber Security Engineer

Job description

KBR requires Cyber Security Engineer for a major MoD Project. This is an initial 6 month contract but potentially could be a five year contract although it will be reviewed on an annual basis. Target Ltd Co. rate is £800 per day (£100 per hour). It is based a minimum of three days a week in Christchurch, Dorset. Remote working for the other two days.

Candidates will be required to undergo SC clearance.

The Role is inside IR35

Role Description
Supporting the Product Security lead, providing cyber security advice and guidance to all stakeholders, including systems and software engineers, technical authority, engineering and project managers, throughout the design and integration phases leading up to accreditation and System Field Trial.

Key activities:
Interpreting security guidance from external sources such as JSP440/604, Federated Mission Network standards, NCSC and NIST.
Performing security risk assessments using recognised methodologies to identify and prioritise cyber security and cyber resilience risks and identifying appropriate controls and mitigations to manage those risks.
Support to achieve security accreditation of Trinity System, up to Secret, including assessing the impact to security of all proposed changes.
Scoping and managing testing by external penetration test companies and ensuring remediation activity is performed to completion.
Supporting security within the supply chain, including meeting the requirements of the Defence Cyber Protection Partnership plus our own company initiatives.
Producing security documentation such as RMADS and SyOPs.

Skills required:
Essential
Experience of cyber security engineering delivery and accreditation within the Defence domain, including identifying cyber security risks using a recognised methodology and the commensurate controls and mitigations required to manage those risks
Ability to interact at a technical level with systems, software and hardware engineers and to articulate security advice directly to key stakeholders within both the business and the customer community.
Degree qualified in Information/Cyber Security, IT, Engineering, Mathematics, or Science, or alternatively equivalent qualifications and/or experience

Desirable
Knowledge and experience in HMG IAS1&2 or similar security risk assessment methodology, JSP440/JSP604/JSP490, NCSC guidance, NIST, ISO 27001 and industry-standard security frameworks.
Experience of electronic and physical security measures, including Tempest
Defence, systems or software engineering background. CCP, CISSP, CISM or similar, GCHQ Certified Degree, ex-CLAS