Cyber Security Specialist

Harvey Nash UK; City of Edinburgh; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Harvey Nash Group is recruiting a Cyber Security Specialist for PubSec in Edinburgh with hybrid working options. You will contribute to cyber security and risk across the service lifecycle for digital transformation programs.

Key activities include threat modelling, risk assessments, design reviews, and alignment with security accreditation requirements. You will work with internal teams and third parties to advance secure delivery.

Qualifications

• Experience providing security guidance across digital service lifecycles.
• Strong ability to interpret security requirements for change projects.
• Proven track record in threat modelling and risk assessments.
• Ability to work in an agile project team with stakeholders and suppliers.
• Demonstrated ownership from project initiation to delivery.

Responsibilities

• Stay aware of cyber threat landscape and industry standards.
• Support scoping and risk assessment of change projects.
• Interpret security requirements from accreditation needs.
• Adapt security controls to fit specific changes.
• Carry out threat modelling and risk assessments.
• Review designs drafted by solution architects.
• Maintain security design evidence for new services.
• Coordinate basic security assessments and CSP reviews.
• Plan independent penetration testing activities.
• Provide recommendations for stage gates and go-live decisions.
• Own completion and accuracy of security-related delivery evidence.
• Suggest SecOps processes and automation for new systems.

Skills

Security and risk assessment

Enterprise-scale digital services

Agile project team collaboration

Ownership & delivery oversight

Knowledge sharing / handover to SecOps

Evidence-based risk recommendations

Azure security experience

Threat modelling & risk assessments

Security design reviews

Tools

Azure

MS Dynamics

Power Platform

MS Defender

Job description

Cyber Security Specialist - PubSec - Outside IR35 - Edinburgh/Hybrid

Market Rates

Duration - 12 months

Harvey Nash's PubSec Client are bringing in a Cyber Security Specialist, you will work as part of a cyber security team, providing advice and guidance to digital transformation projects. Activities will cover cyber security and risk throughout the service lifecycle.

Key Responsibilities

• Be aware of the current cyber threat landscape and industry best practices and standards.
• Support initial scoping and risk assessment of change projects.
• Interpret security best practice and accreditation requirements to determine security requirements.
• Adapt existing cyber security standards and controls to fit specific change projects.
• Carry out threat modelling and risk assessments.
• Review high and low-level designs drafted by solution architects.
• Maintain security design assessments for new services.
• Carry out basic hands-on security assessments (e.g. SSL Labs configuration reviews or CSP evaluation, not including full penetration testing).
• Plan and coordinate independent penetration testing activities.
• Provide recommendations for stage-gating and go-live decisions.
• Own the completion and accuracy of all security-related product delivery evidence.
• Provide recommendations for SecOps processes and automation for new systems.

Technical Scope

• Security products (email filtering, AV, firewalls, WAFs, MS Defender).
• Security testing (SAST, DAST).
• Virtualisation platforms and operating systems, including Hyper-V and Windows Server.
• Enterprise systems (email, PKI, AD, GP, SCCM, Azure, M365).
• Application platforms (MS Dynamics, Power Platform).
• Cloud platforms (Azure).

Skills Required

• Security and risk assessment.
• In-depth understanding of, and experience with, enterprise-scale digital service provision.
• Demonstrable recent experience making a security contribution during the development of a new digital service.
• Ability to work effectively within an agile project team alongside internal stakeholders and third-party suppliers.
• Ability to self-start, take ownership of work, and oversee security aspects from project initiation through to delivery.
• Ability to share knowledge and experience with colleagues and effectively hand over to SecOps teams.
• Ability to make clear, evidence-based, risk-based recommendations to project teams and senior cyber security leadership.
• Experience with the security of Azure-hosted development environments and applications.

Desirable Skills

• Experience with the implementation of AI in business system design.
• Experience with security evaluation of enterprise-scale network architectures.
• Experience with MS Dynamics and Power Platform.
• Experience managing independent testing activities, including scope definition, pre-test configuration, and triage of findings.