Defence Maritime Cybersecurity Consultant: Threat & Risk

Expleo; West of England; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Expleo Academy training

Competitive benefits

Support for security clearance

Job summary

Expleo UK Cybersecurity Practice is seeking a delivery-focused cybersecurity consultant to underpin the security case for a major defence maritime programme. You will establish asset baselines, contribute to threat modelling and support risk assessment across IT and operational technology domains.

The role requires producing traceable security requirements and well-structured evidence for design reviews, with hybrid working and security-clearance considerations.

Qualifications

• Relevant education or industry-recognised certifications in cybersecurity, information assurance, risk management or a related discipline.
• Experience with UK MOD, defence, maritime, shipbuilding or critical national infrastructure is highly beneficial.
• Experience delivering cyber risk, assurance or security requirements work on technical programmes.

Responsibilities

• Lead discovery activity to establish an authoritative asset baseline across documentary, logical, interview and physical sources.
• Populate and maintain the asset register with class, criticality, ownership and interfaces.
• Contribute to threat modelling using recognised methods (STRIDE, MITRE ATT&CK for ICS).
• Support preliminary security risk assessment using NIST SP 800-30 and ISO/IEC 27005; maintain the design risk register.
• Capture security requirements and ensure traceability from threat to risk to control.
• Prepare clear documentation and evidence packs suitable for design review and client acceptance.
• Support security classification, criticality assessment and crosswalks against standards and assurance frameworks.
• Collaborate with engineering, IT, OT and assurance colleagues to close actions and drive risk-based decisions.

Skills

Threat modelling

IT & OT environments

Security frameworks

Documentation & evidence

Stakeholder engagement

Security clearance

Education

Bachelor's degree in cybersecurity or related field

Certifications (CISSP/CISM/ISO 27001 Lead)

Job description

Expleo UK Cybersecurity Practice is seeking a delivery-focused cybersecurity consultant to underpin the security case for a major defence maritime programme. You will establish asset baselines, contribute to threat modelling and support risk assessment across IT and operational technology domains.

The role requires producing traceable security requirements and well-structured evidence for design reviews, with hybrid working and security-clearance considerations.