Senior Security Engineer

Senior Security Engineer required to provide Security Engineering (Infosec) input to the development of the Electronic Architecture (EA) of Land Vehicles.

The candidate will support the Systems Engineering activity on the EA which is currently maturing towards CDR level with various suppliers on-contract to develop and deliver items of individual EA equipment. As part of the role they will then additionally provide Security Engineering expertise across the Product Group to ensure the security aspects of the equipment designs are appropriate to ensure an overall EA solution that will be accepted by the accreditor. The jobholder will be required to work closely with architects, design engineers, managers and subject matter specialists to provide focused security advice, consultancy, guidance and expertise.

The successful candidate will be responsible for the below tasks:
Assessment of security risks and specification of security requirements.
Compilation and production of a variety of security documents, including HMG Risk Management Accreditation Document Set (RMADS) to support MoD security accreditation.
Investigation, assessment and documentation of potential security impacts surrounding changes to Systems, product design and requirements.
Assessment of proposed technology options and security approaches.
Production of Secure configuration documentation and operating procedures.
Evaluation of potential security control mechanisms and products.
The provision of focused security advice/guidance to customers, systems engineers and developers.
Customer security and Information Assurance stakeholder management; providing primary input into focussed customer security working groups and other forums or engagements.
Identification of security related concerns and issues; advising management, architects and designers on security issues or problems and managing those risks accordingly.
Management of security verification and validation effort.
Validation of Sub-contract security approaches, documentation and associated evidence.
Secure configurations of systems and software.
Prepare security accreditation evidence and manage the accreditations process.

The successful candidate will have the below skills:
An understanding of Systems Engineering on defence programmes, with specific experience of technical and security management of third party suppliers to deliver equipment that satisfies the overall system requirement.
Thorough understanding of Military and government security accreditation and evaluation processes.
Knowledge and understanding of Defence and Government security standards and requirements.
Experience in production RMADS and a variety of other security related documentation.
Understanding of the security aspects of Operating Systems; familiar with hardening approaches and techniques primarily for Microsoft Windows based systems.
Conversant with the security aspects of communications networks and protocols, including cryoptographic controls and the provision of security of wireless network implementations to meet HMG Standards, guidance and policy.
Experience in implementing secure systems configuration approaches.
The ability to review, assess and document proposed hardware, software applications and infrastructure for potential security impacts.
A confident, practical and accomplished team member, who is capable of working autonomously.
Good communicator with the ability to write clear and well-reasoned technical documents and to make clear and understandable oral presentations.
Ability to self-manage with little supervision.
Ability to meet challenging timescales.
Candidates must be willing to undergo a security vetting proceedure.