Cyber Security Engineer

  • Job ref:


  • Location:

    New Malden, London

  • Sector:


  • Job type:


  • Salary:

    £55000 - £65000 per annum

  • Contact:

    Tom McParland

  • Email:

  • Published:

    6 months ago

  • Start date:


  • Consultant:


Cyber Security Engineer

Vacancy Type: Permanent

Location: New Malden

Security clearance level required to start: BPSS

Job Description

A key member of the Product Cyber Security (PCS) team, we are actively seeking a Product Cyber Security Engineer in a permanent role capacity. This role will work to the PCS Lead and will provide Product Cyber Security expertise in support of historic, current, and future, business. The role will be primarily involved with those activities that contribute to the achievement of formal accreditation for products contained within the UK Defence portfolio.

Essential qualifications / experience:

  • A demonstrable track-record of successful Information Assurance / Product Cyber Security work;

  • A broad information assurance mind-set, able to assimilate and consider issues from the technical, process and business perspective, supported by a pragmatic attitude to the implementation of security within a defence environment;

  • A sound understanding of the procedures required to identify, quantify and address information assurance or cyber vulnerabilities within a product, project and organisation;

  • Experience of the development and implementation of appropriate risk mitigation plans, policies, processes and technical controls;

  • Excellent communication skills, both written and oral;

  • Experience with formal accreditation processes, e.g. JSP440, HMG IS1/2;

  • Experience in the conduct of Vulnerability Testing and reporting;

Desirable Experience:

  • Experience of cyber / technical security within an Industrial Control environment, regardless of Industry Sector;

  • Formal and relevant qualifications, such as: CISSP, NCSC Certified MSc

  • Maritime Industrial Control Systems

  • Knowledge of IEC/ISA 62443 standards and their implementation in Industrial Control Systems, MITRE ATT&CK & ATT&CK ICS

  • Varied knowledge of manufacturers equipment's, technology and controls system applications for Industrial Control Systems implementation

  • Communication and networking systems used in Industrial Control Systems networks controlling plant and machinery

  • Experience with vulnerability scanning tools such as Nessus

  • Ethical Hacking testing certification

  • Requirements management, interface control documents, and writing policy, procedures and instructions

  • MOD Accreditation Process

Other requirements

  • Travel requirements: Occasional UK travel may be required to attend team / customer meetings and training activities

  • Clearance requirements: Post-holder must be capable of securing, and holding, UK SC clearance