Cyber Security & Assurance Engineer

Leidos, Inc.; Bristol; On-site; GBP 80,000 - 100,000; Full time

Job summary

A global defense and technology company is seeking a Cyber Security & Assurance Engineer to support high-impact projects across logistics, civil, and national security. Key responsibilities include managing agile project outcomes and advancing information assurance opportunities. Candidates must have a strong grasp of confidentiality and risk management, with experience in security for sensitive systems. The role requires DV Clearance and excellent communication skills. This is a full-time on-site position based in the UK.

Qualifications

• Experience with the IT systems engineering lifecycle, including requirements, configuration, testing, and assurance.
• Continuous assurance via implementation of NIST-based Information Security Management System (ISMS) controls.
• Experience managing Information Technology Health Checks (ITHC) activities end-to-end.

Responsibilities

• Support existing programmes through extensive third-party and customer liaison.
• Manage project outcomes in an agile environment.
• Develop and advance information assurance opportunities across customer bases.

Skills

Strong grasp of Confidentiality, Integrity, Availability & Safety (CIA+S)

Practical risk management experience

Experience in assurance processes for secure/sensitive systems

Knowledge of lifecycle methodologies (Waterfall, Incremental, SAFE, DevOps)

Excellent verbal and written communication skills

Job description

Cyber Security & Assurance Engineer (T3)

Location: Full-Time on site to Huntingdon, UK. Clearance: High - DV 'Developed Vetting'.

We’re seeking an Information Assurance Engineer ready to take on diverse, high‑impact projects. You will provide support to customer programmes including PITSM, MPS, HOB, and others across Logistics, Civil, and National Security Defence & Intelligence in the UK. You must be based in the UK and hold DV Clearance (additional clearances may be required).

Key Responsibilities

Support existing programmes such as PITSM through extensive third‑party and customer liaison, demonstrating strong communication and relationship‑building skills.

Manage project outcomes in an agile environment, maintaining service quality through effective scheduling and prioritisation.

Develop and advance information assurance opportunities across expanding customer bases, including the use of common tooling for tracking and reporting assurance actions.

Lead the development of NIST‑compliant risk assessment methodology and tooling, raising quality and customer confidence.

Mentor junior team members, assisting with career planning and personal development.

Qualifications & Experience

• Strong grasp of Confidentiality, Integrity, Availability & Safety (CIA+S) with practical risk management experience.
• Experience in assurance processes for secure/sensitive systems using structured risk analysis.
• Continuous assurance via implementation of NIST‑based Information Security Management System (ISMS) controls and processes.
• Evaluating responses to security requirements for systems.
• Maintaining security documentation (SyOPS, RMADs, Security Management Plans, etc.).
• Experience with the IT systems engineering lifecycle, including requirements, configuration, testing and assurance.
• Knowledge of lifecycle methodologies (Waterfall, Incremental, SAFE, DevOps)
• Experience managing ITHC activities end‑to‑end, from initial scoping through remediation.
• Developing and managing Cyber Incident Response capabilities, including planning, implementation and continuous improvement.
• Proven experience designing and delivering Security Awareness programs, incorporating threat modelling, tabletop exercises and war‑gaming scenarios.
• Experience working in both delivery and proposal environments; experience in MOD AS environments.
• Principles of network and boundary protection (firewalls, mail gateways, load balancers, antivirus, IPS/IDS, Diodes).
• Protective Monitoring systems (SIEM/SOC) and deployment principles.
• Authentication & authorisation technologies (SAML, LDAP, PKI, etc.)
• Encryption protocols and structures supporting secure deployment.
• Excellent verbal and written communication skills; thrives in a team environment.
• Skilled at developing and presenting reports tailored to different audiences.
• Strong commercial awareness and disciplined project management approach.

Commitment to Diversity

We welcome applications from every part of the community and are committed to a truly diverse and inclusive culture. We foster a sense of belonging, welcoming all perspectives and contributions, and providing equal access to opportunities and resources for everyone. If you have a disability or need any reasonable adjustments during the application and selection stages please let us know, and we will respond in a way that best fits your needs.