Cyber Security Engineer in Portsmouth, Hampshire

Cyber Security Engineer
Multiple locations - Frimley, Bristol, Weymouth, Portsmouth, Barrow and Brough.
Salary: Competitive

This role requires you to be able to achieve UK Government Clearance, if you already hold BPSS, SC or DV please apply.

We're looking for a Cyber Security/Product security professional to join the Engineering Delivery Team. The team is responsible for the design, build, and integration activities. They provide life support to all the Submarine Platforms. Your role is to ensure the systems and products are developed to support the delivery of an appropriately secure and resilient product.

Through the application of your knowledge and experience, you shall identify, analyse, evaluate, and manage information security risks associated with the products used onboard. You will interact with customers, users, and internal stakeholders & provide advice on the causes of the risks identified, their likelihood, and potential operational impacts.

Day to Day you'll be-
*Gaining a sufficient understanding of a system, its concept of use and architectures in order to provide an accurate assessment of Product Security in terms of possible threats, and potential avenues of attack and advising on the application of secure development practices and physical controls
*Ensuring that Product Security analysis work are fully documented, enabling the management of risk throughout the product lifecycle. Present risks and proposed controls to internal and external stakeholders, to achieve agreement and buy-in
*Being able to contribute and influence the development of Product Security strategies, policies, guidance, good practices and awareness
*Being able to recommend appropriate controls to mitigate identified risks in line with government and MOD policies and good practice, to provide more cost effective risk mitigation in the longer term
*Representing the Product Security group at Design Reviews and other various engagements, to ensure that Product Security are appropriately considered at each stage of the design lifecycle
*Providing technical guidance and support in relation to product incident management
*Security related activities required to support the engineering lifecycle within the phase relevant to the programme

Key Skills & Expereince we are looking for -
*Degree (or equivalent experience) in a relevant STEM subject or Information Security related
*Recognised Industry Security Qualifications eg CCP, CISSP, CISM or similar (or able to achieve)
*Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001)
*Experience in Product Security activities in the Defence, maritime or closely linked domain
*Experience with MOD Policies and regulations such as SPF, JSP 440, and JSP604 and production of Risk Management Accreditation Document Set (RMADS)
*Knowledge of the challenges affecting the security of Operational Technologies/ Industrial Control Systems and approaches to secure them
*Experience in assessing and advising on controls to support Product Safety
*Supports and contributes to the information security professional bodies and industry forums
*Can demonstrate experience in mentoring and/or providing support to others

Disclaimer:

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.