Cyber Security for Airworthiness Consultant

1923 FRAZER-NASH CONSULTANCY LIMITED; West of England; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Flexible hybrid working

Pension scheme

Private healthcare and life assurance

Cycle to Work scheme

Job summary

Frazer-Nash is seeking a Cyber Security for Airworthiness Consultant to help clients understand and manage cyber threats affecting aircraft safety and airworthiness. You will work at the intersection of cyber security, systems engineering, safety and certification across civil and defence aviation programmes.

Role involves leading technical activities, delivering outputs on time and to budget, and helping develop junior colleagues while building long-term client relationships.

Qualifications

• Degree qualified or equivalent in aerospace, systems, software, cyber security or related discipline.
• Experience in airworthiness, aircraft system development, safety assurance or certification activities.
• Ability to understand how cyber security risks affect aircraft functionality, hazards and safety objectives.
• Clear technical documentation and communication of risk and assurance issues to diverse stakeholders.

Responsibilities

• Lead and deliver Cyber Security for Airworthiness activities across aircraft and system lifecycles.
• Develop and review security plans, scope definitions and assurance artefacts (PSecAC, ASSD, SSSD).
• Conduct security risk assessments, threat analysis and attack path assessments.
• Derive and verify security requirements and supporting assurance evidence.
• Review supplier outputs and provide independent assurance and guidance.
• Support continued airworthiness activities including vulnerability management and security monitoring.

Skills

Airworthiness

Cyber security engineering

Systems engineering

Technical communication

Documentation

Stakeholder engagement

Project management

Education

Degree in aerospace/systems/software/cyber security

Tools

DO-178C/DO-254/DO-326A knowledge

Safety assurance methods

Job description

Title: Cyber Security for Airworthiness Consultant

Salary: £60,000 - £75,000 per annum

Location: Bristol, Burton-on-Trent, Manchester or Glasgow, with hybrid working and travel to client sites as required.

Working Pattern: Frazer-Nash operates a flexible hybrid working model, with time split between the office, client sites and home working. We encourage early applications, as vacancies may close once we receive sufficient applications.

The Opportunity

Frazer-Nash is looking for a Cyber Security for Airworthiness Consultant to help clients understand and manage cyber security threats that could affect aircraft safety and airworthiness. Working at the intersection of cyber security, systems engineering, functional safety and certification, you will support a range of civil and defence aviation programmes throughout the system lifecycle. You will collaborate with multidisciplinary teams to assess the safety impacts of intentional unauthorised electronic interaction and develop robust assurance evidence to support airworthiness and certification decisions. This is an engineering assurance role rather than a traditional enterprise IT security position. It requires the ability to connect cyber threats and vulnerabilities to aircraft functions, system architectures, hazards, development assurance activities and continued airworthiness considerations. You will lead technical activities, deliver high-quality outputs to agreed time, cost and quality objectives, contribute to technical assurance, support the development of junior colleagues and help build long-term client relationships and future business opportunities.

The Role

• Lead and deliver Cyber Security for Airworthiness (CSA) activities across aircraft and system lifecycles.
• Develop and review security plans, scope definitions and assurance artefacts, including PSecAC, ASSD and SSSD documentation.
• Conduct security risk assessments, threat analysis and attack path assessments at aircraft, system and equipment level.
• Derive, allocate and verify security requirements and supporting assurance evidence.
• Review supplier outputs and provide independent assurance, technical guidance and intelligent customer oversight.
• Support continued airworthiness activities, including vulnerability management, configuration control and security monitoring.
• Build trusted client relationships and contribute to business development, bids, methodologies and capability growth.

Relevant Standards and Guidance

• EUROCAE ED-202A / RTCA DO-326A - Airworthiness Security Process Specification.
• EUROCAE ED-203A / RTCA DO-356A - Airworthiness Security Methods and Considerations.
• EUROCAE ED-204 / RTCA DO-355 - Information Security Guidance for Continuing Airworthiness.
• SAE ARP4754A/B - Guidelines for Development of Civil Aircraft and Systems.
• SAE ARP4761A - Safety Assessment Processes for Civil Airborne Systems and Equipment.
• EUROCAE ED-12C / RTCA DO-178C - Software Considerations in Airborne Systems and Equipment Certification.
• EUROCAE ED-80 / RTCA DO-254 - Design Assurance Guidance for Airborne Electronic Hardware.
• EUROCAE ED-14G / RTCA DO-160G - Environmental Conditions and Test Procedures for Airborne Equipment.
• Applicable EASA, UK CAA, FAA and Military Aviation Authority regulations, policies and acceptable means of compliance.
• Defence standards and safety management requirements relating to military air systems.

What We’re Looking For

Essential Experience

• Degree qualified, or equivalent practical experience, in aerospace, systems, software, electronics, cyber security, safety engineering or a related discipline.
• Experience in airworthiness, aircraft system development, safety assurance, cyber security engineering or certification activities.
• Ability to understand and communicate how cyber security risks can impact aircraft functionality, operational outcomes, hazards and safety objectives.
• Experience producing or assessing structured engineering evidence with clear requirements, assumptions, traceability and verification.
• Understanding of systems engineering lifecycles, architectures, interfaces, configuration management and change control processes.
• Ability to produce clear technical documentation and communicate complex risk and assurance issues to both technical and non-technical stakeholders.
• Strong verbal and written communication skills with the confidence to engage clients and multidisciplinary teams.
• Ability to manage competing priorities and deliver work to agreed time, cost and quality expectations.

Desirable Experience

• Practical knowledge of DO-326A / ED-202A and DO-356A / ED-203A.
• Experience developing or reviewing certification plans, security scope definitions, risk assessments, security requirements or assurance evidence.
• Aircraft or system safety assessment experience using ARP4761/A methods, including FHA, PSSA, SSA, FTA, FMEA or common cause analysis.
• Development assurance experience under ARP4754A/B, DO-178C or DO-254.
• Experience supporting certification or military airworthiness activities, including engagement with regulatory authorities, Type Airworthiness Authorities and Duty Holder organisations.
• Knowledge of aircraft architectures, avionics, mission systems, datalinks, ground support systems, maintenance systems, autonomy or uncrewed air systems.
• Experience in threat modelling, attack path analysis, security architecture, vulnerability assessment or security verification within safety-critical embedded systems.
• Experience supporting continued airworthiness, in-service vulnerability management, occurrence response or security monitoring.
• Progress towards professional registration, such as Chartered Engineer (CEng), Incorporated Engineer (IEng) or Chartered Cyber Security Professional (CCSP).

Security Clearance

Due to the nature of the work undertaken by Frazer-Nash, candidates will be required to undergo pre-employment screening and must be capable of meeting the requirements of UK National Security Vetting and individual client security clearance criteria.

Benefits

• Competitive salary with annual salary reviews.
• 25 days' annual leave, plus the option to buy up to five additional days.
• Flexible and hybrid working arrangements.
• Enhanced parental leave and family-friendly policies.
• Company pension scheme.
• Professional development support and assistance towards professional registration.
• Private healthcare and life assurance.
• Performance-related bonus scheme.
• Payment of professional institution membership fees.
• Cycle to Work scheme and season ticket loan.
• A range of additional flexible benefits is also available, allowing employees to tailor their package to their individual needs.

Frazer-Nash is a leading systems, engineering and technology company. We help organisations deliver innovative engineering and technology solutions to make lives safe, secure, sustainable, and affordable. With over 1000 employees, we work from a network of nine UK and four Australian locations. Our people apply their expertise to develop, enhance and protect our clients' critical assets, systems and processes. We use our skills and talents to ensure a sustainable future for society. Our work helps deliver a safe and secure world, where natural resources are conserved, and clean energy is available to all. And we focus on actions to reduce climate change; supporting rapid and far-reaching transformations in the delivery of energy, security, industry, and transport.

We care At Frazer-Nash, we care about each other; always looking to collaborate and see things from the other person’s point of view. We offer mutual support, learn from one another, and work as a team to deliver the best results. Everyone has a voice, and we all make the time to listen. We will work with openness and collaborate effectively – thinking about our clients and our people, and responding to their needs. We care about the difference we make to the wider world.

We are trusted Effective collaboration is founded upon trust. We earn the trust of our customers and colleagues by delivering on the commitments we have made to them.

We deliver success We deliver value and success to our customers and to our business. We continually strive to be the best at what we do. We want to do things that matter We seek out interesting and satisfying work that helps makes a difference in society. We use our expertise to provide trusted, impartial professional advice to our clients By making a difference to today, we benefit the world of tomorrow – so we can all go home each day knowing that we’ve done something that really mattered.