Cyber Security for Airworthiness Consultant

Frazer-Nash Consultancy; Stoke-on-Trent; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Competitive salary reviews

25 days' annual leave

Flexible and hybrid working

Pension scheme

Professional development support

Private healthcare

Life assurance

Bonus scheme

Job summary

Frazer-Nash Consultancy seeks a Cyber Security for Airworthiness Consultant to help clients understand and manage cyber security threats affecting aircraft safety and airworthiness. You will operate at the intersection of cyber security, systems engineering, safety certification and lifecycle support for civil and defence aviation programs.

You will lead technical activities, develop robust assurance evidence, and build long-term client relationships while delivering outputs to time and budget.

Qualifications

• Experience in airworthiness, aircraft system development and safety assurance.
• Ability to connect cyber threats to aircraft functionality and safety objectives.
• Experience producing engineering evidence with traceability and verification.
• Strong written and verbal communication for stakeholders.

Responsibilities

• Lead and deliver Cyber Security for Airworthiness (CSA) activities across aircraft and system lifecycles.
• Develop and review security plans, scope definitions and assurance artefacts, including PSecAC, ASSD and SSSD documentation.
• Conduct security risk assessments, threat analysis and attack path assessments at aircraft, system and equipment level.
• Derive, allocate and verify security requirements and supporting assurance evidence.
• Review supplier outputs and provide independent assurance, technical guidance and intelligent customer oversight.
• Support continued airworthiness activities, including vulnerability management, configuration control and security monitoring.
• Build trusted client relationships and contribute to business development, bids, methodologies and capability growth.

Skills

Cyber security

Systems thinking

Threat modelling

Communication skills

Education

Degree in aerospace, systems, software, electronics, cyber security or safety engineering

Job description

Title

Cyber Security for Airworthiness Consultant

Cyber Security for Airworthiness Consultant

Salary

£60,000 - £75,000 per annum

Location

Bristol, Burton-on-Trent, Manchester or Glasgow, with hybrid working and travel to client sites as required.

Working Pattern

Frazer-Nash operates a flexible hybrid working model, with time split between the office, client sites and home working.

We encourage early applications, as vacancies may close once we receive sufficient applications.

The Opportunity

Frazer-Nash is looking for a Cyber Security for Airworthiness Consultant to help clients understand and manage cyber security threats that could affect aircraft safety and airworthiness. Working at the intersection of cyber security, systems engineering, functional safety and certification, you will support a range of civil and defence aviation programmes throughout the system lifecycle.

You will collaborate with multidisciplinary teams to assess the safety impacts of intentional unauthorised electronic interaction and develop robust assurance evidence to support airworthiness and certification decisions.

This is an engineering assurance role rather than a traditional enterprise IT security position. It requires the ability to connect cyber threats and vulnerabilities to aircraft functions, system architectures, hazards, development assurance activities and continued airworthiness considerations.

You will lead technical activities, deliver high-quality outputs to agreed time, cost and quality objectives, contribute to technical assurance, support the development of junior colleagues and help build long-term client relationships and future business opportunities.

The Role

• Lead and deliver Cyber Security for Airworthiness (CSA) activities across aircraft and system lifecycles.
• Develop and review security plans, scope definitions and assurance artefacts, including PSecAC, ASSD and SSSD documentation.
• Conduct security risk assessments, threat analysis and attack path assessments at aircraft, system and equipment level.
• Derive, allocate and verify security requirements and supporting assurance evidence.
• Review supplier outputs and provide independent assurance, technical guidance and intelligent customer oversight.
• Support continued airworthiness activities, including vulnerability management, configuration control and security monitoring.
• Build trusted client relationships and contribute to business development, bids, methodologies and capability growth.

Relevant Standards and Guidance

The Successful Candidate Will Apply, Interpret And Work With a Range Of Aviation Cyber Security, Safety And Certification Standards. Experience Across Some, Rather Than All, Of The Following Is Expected

• EUROCAE ED-202A / RTCA DO-326A - Airworthiness Security Process Specification.
• EUROCAE ED-203A / RTCA DO-356A - Airworthiness Security Methods and Considerations.
• EUROCAE ED-204 / RTCA DO-355 - Information Security Guidance for Continuing Airworthiness.
• SAE ARP4754A/B - Guidelines for Development of Civil Aircraft and Systems.
• SAE ARP4761A - Safety Assessment Processes for Civil Airborne Systems and Equipment.
• EUROCAE ED-12C / RTCA DO-178C - Software Considerations in Airborne Systems and Equipment Certification.
• EUROCAE ED-80 / RTCA DO-254 - Design Assurance Guidance for Airborne Electronic Hardware.
• EUROCAE ED-14G / RTCA DO-160G - Environmental Conditions and Test Procedures for Airborne Equipment.
• Applicable EASA, UK CAA, FAA and Military Aviation Authority regulations, policies and acceptable means of compliance.
• Defence standards and safety management requirements relating to military air systems.

What We're Looking For

• Degree qualified, or equivalent practical experience, in aerospace, systems, software, electronics, cyber security, safety engineering or a related discipline.
• Experience in airworthiness, aircraft system development, safety assurance, cyber security engineering or certification activities.
• Ability to understand and communicate how cyber security risks can impact aircraft functionality, operational outcomes, hazards and safety objectives.
• Experience producing or assessing structured engineering evidence with clear requirements, assumptions, traceability and verification.
• Understanding of systems engineering lifecycles, architectures, interfaces, configuration management and change control processes.
• Ability to produce clear technical documentation and communicate complex risk and assurance issues to both technical and non-technical stakeholders.
• Strong verbal and written communication skills with the confidence to engage clients and multidisciplinary teams.
• Ability to manage competing priorities and deliver work to agreed time, cost and quality expectations.

Desirable Experience

• Practical knowledge of DO-326A / ED-202A and DO-356A / ED-203A.
• Experience developing or reviewing certification plans, security scope definitions, risk assessments, security requirements or assurance evidence.
• Aircraft or system safety assessment experience using ARP4761/A methods, including FHA, PSSA, SSA, FTA, FMEA or common cause analysis.
• Development assurance experience under ARP4754A/B, DO-178C or DO-254.
• Experience supporting certification or military airworthiness activities, including engagement with regulatory authorities, Type Airworthiness Authorities and Duty Holder organisations.
• Knowledge of aircraft architectures, avionics, mission systems, datalinks, ground support systems, maintenance systems, autonomy or uncrewed air systems.
• Experience in threat modelling, attack path analysis, security architecture, vulnerability assessment or security verification within safety-critical embedded systems.
• Experience supporting continued airworthiness, in-service vulnerability management, occurrence response or security monitoring.
• Progress towards professional registration, such as Chartered Engineer (CEng), Incorporated Engineer (IEng) or Chartered Cyber Security Professional (CCSP).

Security Clearance

Due to the nature of the work undertaken by Frazer-Nash, candidates will be required to undergo pre-employment screening and must be capable of meeting the requirements of UK National Security Vetting and individual client security clearance criteria.

Benefits

Frazer-Nash offers an excellent benefits package, including:

• Competitive salary with annual salary reviews.
• 25 days' annual leave, plus the option to buy up to five additional days.
• Flexible and hybrid working arrangements.
• Enhanced parental leave and family-friendly policies.
• Company pension scheme.
• Professional development support and assistance towards professional registration.
• Private healthcare and life assurance.
• Performance-related bonus scheme.
• Payment of professional institution membership fees.
• Cycle to Work scheme and season ticket loan.
• A range of additional flexible benefits is also available, allowing employees to tailor their package to their individual needs.