Rosie Anderson

View Profile

Apply Now

Information Assurance Engineer - Product Security

Ref #: HPD#357
Rosie Anderson 26/02/2023
Location: Hybrid, Portsmouth, Bristol, E Riding of Yorkshire, Surrey, Barrow in Furness Not Disclosed Hybrid, Portsmouth, Bristol, E Riding of Yorkshire, Surrey, Barrow in Furness
Salary: £45,000 - £68,000 plus excellent benefits £
Type: Permanent
Sector: Defence
Specialisms: Product Security, Information Assurance, Risk Assessment,
Date: 26/02/2023
Information Assurance Engineer - Product Security

Cyber Security/Product Security Opportunities - Information Assurance - Flexible locations with a mainly remote work pattern

My Defence client is looking for a number of cyber security consultants to work to ensure the product security of large and complex systems.

What you’ll be doing:

  • Gaining a sufficient understanding of a system, its concept of use and architectures to provide an accurate assessment of Product Security in terms of possible threats, and potential avenues of attack and advising on the application of secure development practices and physical controls
  • Ensuring that Product Security analysis work are fully documented, enabling the management of risk throughout the product lifecycle.
  • Contributing and influencing the development of Product Security strategies, policies, guidance, good practices and awareness
  • Recommending appropriate controls to mitigate identified risks in line with government and MOD policies and good practice, to provide more cost-effective risk mitigation in the longer term
  • Representing the Product Security group at Design Reviews and other various engagements, to ensure that Product Security are appropriately considered at each stage of the design lifecycle
  • Providing technical guidance and support in relation to product incident management
  • Security related activities required to support the engineering lifecycle within the phase relevant to the programme

Your skills and experiences:

ESSENTIAL:

  • Degree (or equivalent experience) in a relevant STEM subject or Information Security related
  • Recognised Industry Security Qualifications, eg. CCP, CISSP, CISM (or able to achieve)
  • Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001)

DESIRABLE:

  • Experience of Product Security activities in the defence, maritime or closely linked domain
  • Experience of MOD Policies and regulations such as SPF, JSP 440 and JSP604 and production of Risk Management Accreditation Document Set (RMADS)
  • Knowledge of the challenges affecting security of Operational Technologies/ Industrial Control Systems and approaches to secure them
  • Experience of assessing and advising on controls to support Product Safety
  • Experience of mentoring and/or providing support to others

Salary & Benefits:

Dependent on your prior experience, the customer is offering a salary of between £45,000 - £68,000 plus excellent benefits.

You’ll receive benefits including a competitive pension scheme, enhanced annual leave allowance and a Company contributed Share Incentive Plan. You’ll also have access to additional benefits such as flexible working, an employee assistance programme, Cycle2work and employee discounts – you may also be eligible for an annual incentive

Due to the nature of the work undertaken, you must complete a security clearance prior to onboarding. To be eligible for security clearance, you must have worked and resided in the UK for the last 5 years

Back to Jobs

Apply Now