Snior Information Security Engineer - Products, COMSEC

Senior Information Security Engineer - Product Development, Senior COMSEC

• Role Type: Contract

• Role Length: 12 Months initially

• Rate: £650 - £700 Per Day Inside IR35

• Location: Newport - 5 Days on site

• Security Clearance: SC or DV- (Must be eligible to go through DV)

Key Skills:

+ Senior Information Security experienced

You will report directly to the Information Security Engineering Lead supporting throughout the lifecycle of High Grade security product developments, ensuring compliance with the relevant security policies and standards with evidence of compliance documented throughout the lifecycle for evaluation by security authorities.

You will be key in supporting the Lead for all security aspects of the equipment/deliverables to ensure the end product meets the required standards

Main Tasks and Responsibilities:

• Lead the analysis of product design and requirements from a security perspective

• Produce evaluation deliverables documenting each stage of the design for review by evaluators

• Lead regular CAPS progress meetings with government evaluation team and perform supporting administration activities

• Ensure documentation is produced on time and effectively addresses the required security standards

• Lead the interface between external evaluation team and internal project team

• Lead discussion and presentation of security issues during engineering reviews

• Administer and coordinate progress documentation (meeting minutes, memos, progress tracker spreadsheets) to ensure evaluation activities are monitored between progress meetings

• Contribute to the maintenance and improvement of internal product security processes

• ability to multitask / switch context

Skills and Experience

• HND/Degree in Systems Engineering or other relevant subjects (science/computing/engineering) preferred

• 3 to 5+ years' experience in an Information Security role

• Analytical skills to perform analysis of the design from a security perspective

• Experience of applying information security/communications security principles

• Experience of understanding of and interpretation of the relevant security standard requirements

Desirable:

Understanding of the CAPS evaluation process

Experience of working with NCSC/MoD standards

ISO27001

CISSP