Security Solutions Engineer

Your tasks

• Accreditation Readiness: You will be responsible for ensuring that system solutions are fully prepared for accreditation. This includes leading internal security assessments to evaluate the system's security status, tracking findings, and ensuring the system are technically and documentation compliant with the requirements of the accrediting authorities.
• Information Assurance & Compliance: You will ensure that project activities align with ISO 27001 and other relevant Information Assurance (IA) frameworks, ensuring that security controls are consistently applied and documented.
• Continuous Security Hygiene: You will proactively monitor and maintain "Security Hygiene" within the projects. This involves the continuous review of security baselines, and ensuring that security patches and configuration updates are handled systematically.
• Engagement through full Project Lifecycle: You will defining security requirements for complex projects, develop secure design solutions, verify & validate against MOD & Government standards
• Risk Management & Mitigation: You will identify security risks and develop robust risk assessments. A key part of your role will be preparing Security Risk Balance Cases (RBC) for incidents that cannot be resolved directly, defining appropriate mitigations via configuration or the operating environment.
• Cybersecurity Engineering: In collaboration with R&D and Design teams, you will define System Hardening baselines and oversee their implementation. You will perform Security Impact Assessments (SIA) for Engineering Change Proposals (ECP) and Change Requests (CR).
• Documentation & Evidence Management: You will create and maintain critical security documentation, including security operating procedures and how-to guides (e.g., for patching, password management, smart card security, and secure enclosure management). You will be responsible for the structured collection of verification evidence.
• Testing & Verification: You will update security test cases and hardening/verification scripts. You will provide essential technical support during penetration testing events and formal security evaluations.
• Stakeholder Coordination: You will act as the central technical point of contact for the customer’s Security Manager, providing the necessary documentation and evidence to facilitate communication with the UK MoD and other national authorities.

Your qualifications

• UK National with SC clearance (or held SC clearance in previous 12 months)
• Willing & able to achieve Developed Vetting clearance
• Education: A degree in Computer Science, Information Technology, Electrical Engineering, or a similar qualification with a strong focus on Information Security.
• Experience: Several years of professional experience in Information Security and Security Architecture, ideally within the Naval or Defence sector.
• Technical Expertise: o Proven track record in preparing systems for accreditation and managing Information Assurance processes. o Knowledge of ISO 27001 and UK/NATO security standards or equivalent frameworks (e.g., UK JSP 440, Defstan 05-138). o Hands-on experience in System Hardening and working with OS Protection Profiles. o Proficiency in using tracking tools (e.g., IBM RTC) to manage security findings.
• Soft Skills: A structured, analytical approach with a commitment to maintaining high security standards ("Security Hygiene"). You can communicate complex technical security issues clearly to the customer's security representatives.
• Languages: Full professional proficiency in English (written and spoken) is mandatory. Proficiency in German is an advantage. Travel - This is a hybrid position with frequent travel within the UK and Germany

Interested?