Associate Project Security Engineer

Cyberjobs; West of England; Hybrid; GBP 34,000 - 41,000; Full time

Benefits offered by this job

25 days’ annual leave +1 day a year up

Flexible and hybrid working options

Market-leading employer pension 28.97%

Annual performance-based bonus and...

Access to specialist training and...

Support for progression

Huge range of discounts

Volunteering days

Enhanced parental leave schemes

Job summary

Defence Equipment & Support (DE&S) at MOD Abbey Wood, Bristol, is seeking an Associate Project Security Engineer to help protect critical defence projects by turning cyber risks into clear, practical advice. You will gain hands-on experience across risk assessment, threat analysis, assurance and security case development.

You will lead lower-complexity work with support, collaborate with security specialists and risk owners, and pursue industry qualifications while developing your professional

Qualifications

• Proven experience in information risk management and decision making.
• Level 5 qualification in Computing Science or equivalent experience.

Responsibilities

• Conduct cyber risk assessments for projects.
• Advise on cyber security controls and risk mitigation.
• Develop security documentation.
• Support security governance and reporting.
• Lead lower-complexity security activities with supervision.
• Collaborate with security teams and risk owners.

Skills

Information risk management

Decision making

Education

Level 5 qualification in Computing Science

Job description

Organisation: Defence Equipment & Support
Salary:£37,600 per annum (plus generous benefits)
Grade: STSI
Working Pattern: Full time, Part time, Job Share, Flexible Working
Contract Type: Permanent

Job Summary

At Defence Equipment & Support (DE&S), we supply and maintain vital equipment and services for the Royal Navy, British Army and Royal Air Force. Together, we deliver a vast range of essential defence programmes, and strive for what's next. Because it helps keep our military at the top of their game and our nation safe – for today, and tomorrow.

DE&S has recently been integrated into the National Armaments Director (NAD) Group. The NAD Group brings together key Ministry of Defence (MOD) organisations to unite expertise across science, technology, procurement, infrastructure, and support to provide integrated capabilities faster and more efficiently for our armed forces and our allies.This is an exciting new opportunity to enable better ways of working and empower greater collaboration across Defence. For further information about the NAD Group, please visit: National Armaments Director Group - GOV.UK

We offer 25+ days’ holiday, flexible and hybrid working, enhanced parental leave schemes, shopping discounts, and an exceptional employer pension contribution of 28.97%, to help make work for you.

For security reasons this role is open to sole UK nationals only. A ‘sole UK national’ refers to an individual who holds citizenship solely in the UK, without dual citizenship or nationality from another country. We’re unable to offer visa sponsorship.

This role requires you to have lived in the UK for the last 5 years and obtain Security Check (SC) security clearance. Clearance must be obtained without any caveats that prevent you from carrying out the role you’ve been recruited for. If it isn’t obtained, or is obtained but with caveats that prevent you from carrying out the role, any conditional offer made to you will be withdrawn. Obtaining SC security clearance can be a lengthy process, and we reserve the right to withdraw any conditional offer made if the necessary security clearance isn’t obtained within 12 months.

Job description

As an Associate Project Security Engineer within the DE&S Security Profession at MOD Abbey Wood, Bristol, you will be able to build a cyber security career where your work has real purpose. You will help protect important Defence projects and services by turning cyber risks into clear, practical advice.

You will have the opportunity to gain hands‑on experience across risk assessment, threat analysis, assurance and security case development. Aswell as this, you will have the autonomy to lead lower‑complexity activity, with expert support available as you build confidence and take on more challenging assignments.

You will work alongside experienced security specialists, delivery teams and risk owners, giving you broad exposure and the opportunity to influence decisions that matter. We will support your professional development, including opportunities to work towards relevant industry qualifications and accreditations.

“You can see the difference your advice makes. You are supported to develop your expertise, trusted to use your judgement and given opportunities to work on varied Defence challenges.” Current Project Security Engineer

If you want meaningful work, supportive development and the chance to grow your influence in Defence cyber security, this role offers an excellent next step.

We champion flexible ways of working. Regular in‑person attendance is required to promote the benefits of face‑to‑face collaboration alongside flexibility of hours to support work‑life balance and business need. Initially, you may be expected to attend more frequently to familiarise yourselves with the site, the team, and your role.

What you’ll be doing

• Work within established security and risk governance, independently on lower‑complexity projects and with supervision on more complex work, to identify business security needs and undertake cyber risk assessments, basic threat assessments and related risk management activities.
• Understanding the applicability of appropriate legislation and regulations, in combination with MoD’s governance documentation such as MoD policies
• Provide advice to address identified Cyber Security related risks by applying of a variety of security capabilities, which may include using published guidance, standards, or experts as appropriate.
• Provide advice to validate the effectiveness of risk mitigation measures, including an understanding of how to use different assurance activities and make recommendations for improvement.
• Help risk or service owners to make decisions that are well informed by good and clear security advice, including contributing to reports or working within established reporting chains in a security team.
• Develop and maintain security documentation to capture and communicate security information.

Person specification

To be successful with your application, you'll need to show that you meet the following essential criteria:

• Lead criterion – Demonstrable proven experience in information risk management and decision making
• Level 5 Qualification in relevant subject (Computing Science, Systems Design, information Systems Management) or equivalent experience.

In addition to the responsibilities above, the following technical competences and behaviours will be assessed at interview:

• Core Behaviour 1: Making Effective Decisions – CSBC 3
• Core Behaviour 2: Communicating and Influencing – CSBC 3
• Technical Competence 1: Information Risk Assessment and Risk Management – Practitioner
• Technical Competence 2: Threat Understanding – Working

Offered benefits

• 25 days’ annual leave +1 day a year up to 30 days, 8 bank holidays and a day off for the King’s birthday
• Flexible and hybrid working options
• Market‑leading average employer pension contribution of 28.97%
• Annual performance‑based bonus and recognition awards
• Access to specialist training and funded qualifications
• Support for progression
• Huge range of discounts
• Volunteering days
• Enhanced parental leave schemes

Improving innovation and enriching our culture, diversity of thought is vital to our success. So whether you’re looking for a new opportunity, a next step, or a helping hand as you return from a career break, bring your experiences and help deliver for the defence of tomorrow. Here you’ll find a supportive, family‑friendly organisation to be a part of - and if you need any assistance with your application, just let us know.

#LI-Hybrid

Further Information

• Civil Service Recruitment Principles: CSC Recruitment Principles
• Candidate Information Pack: NAD Group Candidate Pack
• Terms and Conditions: Terms and Conditions
• Civil Service Code: The Code - Civil Service Commission

Any personal data that you provide during the Recruitment process will be treated in accordance with the MOD Privacy Notice which can be accessed here.

Disability Confident

As a Disability Confident Leader we want to ensure you receive any reasonable adjustments that you need throughout the recruitment process. If you do require any reasonable adjustments, you can let us know on your online application under the section ‘Please indicate and give details of any reasonable adjustments you may require during the recruitment process.’

Please note that where high numbers of applications are received, departments can choose to interview candidates that best meet the essential criteria for the job, rather than interviewing all that meet the essential criteria. This is at the discretion of advertising departments to decide what they have capacity to interview.

Conflicts of Interest

The Ministry of Defence requires all candidates who are successful at interview to declare any outside interests. These declarations will be discussed with successful candidates following the interview process and before a formal offer of employment is made, as some outside interests may not be compatible with MOD civilian roles. This will not, in the majority of cases, prevent employment in MOD, but it is a measure that must be taken to ensure that appropriate mitigations can be put in place to manage any potential, perceived or actual conflicts of interest from the first day of employment.

Selection Process Details

Your application will go through the following stages of assessment:

1. Pre‑sift - We will check your application to ensure that you meet any essential or eligibility criteria that are listed in the Person Specification section of this advert. On your CV, please clearly show how you meet the essential criteria.
2. Sift - Your CV will be assessed against the following categories, using a simple numerical scoring system: Key Achievements; Relevant Experience; Applied Knowledge and Skills. Please follow our guidance on CV writing for best chance of success.
3. Interview - Interview questions will assess the following behaviours and technical competencies:

• CV Review
• Core Behaviour 1
• Core Behaviour 2
• Technical Competencies

Please Note in the event of a tied score at interview, the Order of Merit will be distinguished based on the ranking of the assessed behaviours and competencies below:

• 1st: Core Behaviour 1
• 2nd: Core Behaviour 2
• 3rd: Technical Competencies
• 4th: CV Review

In the event of a further tie using the method above, we reserve the right to utilise the Lead criteria, and/or an additional assessment. Please note for this specific assessment, the Lead Criteriawill be:

Demonstrable proven experience in information risk management and decision making

Please Note:

In the event of high volume of applications, the selection panel reserves the right to increase the overall pass mark. Please refer to the candidate pack for more information.

Feedback will only be provided if you attend an interview.

If you feel that your application has not been treated in accordance with the Recruitment Principles and you wish to make a complaint, in the first instance you should contact department via email (NAD‑Recruitment‑[e-mail].) If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission: Recruitment Complaints - Civil Service Commission

Offering at a lower level

If you’re not successful at interview, we may offer you a role at a lower level if this is a match for your skills and experience. If this applies to your application, you’ll be scored against criteria for the lower-level role and offers will be made in merit order. If you accept this position, you’ll be able to take advantage of opportunities to develop your career as part of our team.

We are the National Armaments Director Group (NAD Group). Part of the Ministry of Defence (MOD), we bring together a wide range of expertise to develop, deliver, and sustain the UK©s national defence capabilities. Working closely with industry, international partners, and allies, we provide the equipment, technology, and support services that enable our armed forces to operate effectively and respond to the challenges of today and tomorrow.

There is no doubt that security and resilience professionals play a crucial role in ensuring the confidentiality, integrity and availability of resources vital to the safety and prosperity of the United Kingdom. We assess and mitigate risk across the cyber and physical domains, developing and implementing strategies to enhance the overall security posture of DE&S and safeguard the integrity of our operations, people and capabilities.

Please see the MOD Privacy notice which informs how we will use your personal data, explains your rights and gives you information you are entitled to under Data Protection legislation.

Working for the Civil Service

The Civil Service Code sets out the standards of behaviour expected of civil servants. We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission’s recruitment principles.

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. Please click here to find out more.

DE&S/SDA and MOD Main internal applicants will need to apply through MyHR Internal Career Portal via the DE&S/SDA jobs tile. This can be found on the MyHR home page.

Please ensure you check your junk mail for email notifications from the DE&S/SDA Talent Acquisition Team. To stop notifications being sent to your junk mail please add the following email address([e-mail])to the Safe Senders list in your email account.