Information Security Engineer

Lockheed Martin; Ampthill; On-site; GBP 54,000 - 67,000; Full time

Benefits offered by this job

BUPA health insurance

Bonus

Benefits

Job summary

Lockheed Martin in Ampthill, Bedfordshire, UK, is seeking an Information Security Engineer to lead security engineering, accreditation, and lifecycle assurance of classified IT systems. You will design, implement, and operate secure environments while ensuring compliance with UK Government, MoD, and Lockheed Martin security requirements.

The role collaborates with programme teams, architects, accreditors and information assurance stakeholders to embed security throughout the system lifecycle.

Qualifications

• Experience securing classified, air-gapped, or highly regulated IT environments.
• Knowledge of UK SPF, NCSC guidance, JSP 440, and Defence security requirements.
• Experience obtaining Authority to Operate (ATO) for classified or regulated systems.
• Strong written and verbal communication skills.

Responsibilities

• Lead security engineering across classified IT systems and projects.
• Coordinate system accreditation activities and RMADS, Security Cases, and Security Plans.
• Develop and maintain accreditation artefacts and evidence.
• Support incident response investigations and vulnerability management.

Skills

Secure by design

Threat modelling

Security architecture

Vulnerability management

Audits & compliance

Incident response

Clear communication

Cloud security

Education

Bachelor's degree in Cyber Security/Information Security/CS/Engineering

Tools

Windows Server

Linux

Virtualization

SIEM

RMADS / Security docs

Job description

Information Security Engineer - Classified Systems

Ampthill, Bedfordshire, UK

£54,000 - £67,000p/a with BUPA, bonus, benefits

37.5 hours per week with 4 day work week option

Reporting to the EMEA Information Security Officer, the Information Security Engineer will be responsible for the security engineering, accreditation, and lifecycle assurance of classified and sensitive IT systems.

The role will support the design, implementation, operation, and continuous improvement of secure IT environments, ensuring compliance with UK Government, MoD, and Lockheed Martin security requirements.

The successful candidate will work closely with programme teams, architects, infrastructure engineers, accrediting authorities, and information assurance stakeholders to ensure security is embedded throughout the system lifecycle.

Key Responsibilities:

• Lead the implementation of Secure by Design principles across classified IT systems and projects.
• Provide security engineering expertise throughout the system development and operational lifecycle, ensuring security requirements are identified and implemented from concept through disposal.
• Conduct security architecture reviews, threat assessments, and technical risk analysis for classified environments.
• Support the development and maintenance of system security documentation, security architectures, and security operating procedures.
• Lead and coordinate system accreditation activities for classified and sensitive systems.
• Develop and maintain accreditation artefacts including Risk Management and Accreditation Documentation Sets (RMADS), Security Cases, Security Management Plans, and supporting evidence.
• Work with Accreditors, Security Controllers, and customer security representatives to obtain and maintain Authority to Operate (ATO) approvals.
• Ensure continued compliance with applicable regulatory, contractual, and customer security requirements throughout system operation.
• Identify, assess, and mitigate cybersecurity risks within classified IT environments.
• Conduct security assessments, vulnerability reviews, and compliance audits against corporate and government security standards.
• Support risk treatment planning and remediation activities.
• Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable.
• Support incident response investigations affecting classified systems.
• Assist with vulnerability management, patch management, and security monitoring activities.
• Participate in security reviews and technical investigations to identify root causes and corrective actions.
• Provide technical guidance to system administrators and engineering teams on security controls and best practices.
• Collaborate with programme managers, solution architects, IT teams, information assurance practitioners, and customer representatives.
• Provide security guidance to project teams during system design, implementation, and operational support phases.
• Support customer and regulatory audits and inspections.

Required skills, qualifications and experience

• Strong understanding of Microsoft Windows Server, Linux operating systems, virtualisation technologies, and enterprise networking.
• Experience securing classified, air-gapped, or highly regulated IT environments.
• Knowledge of cloud security principles including AWS, IaaS, and PaaS technologies where applicable.
• Familiarity with security technologies including endpoint protection, SIEM, vulnerability management, encryption, and identity management solutions
• Demonstrable experience applying Secure by Design principles in complex IT systems and programmes.
• Experience conducting security architecture reviews, threat modelling, and risk assessments.
• Strong understanding of system hardening, security controls implementation, and security testing methodologies.
• Experience supporting system engineering and security requirements management within regulated environments.
• Accreditation & ATO Experience
• Proven experience developing accreditation evidence and security assurance documentation.
• Experience obtaining and maintaining Authority to Operate (ATO) approvals for classified or regulated systems.
• Knowledge of UK Government and MoD accreditation processes and assurance frameworks.
• Experience working directly with accrediting authorities, security controllers, or customer assurance organisations.
• Excellent written and verbal communication skills.
• Ability to communicate technical security concepts to both technical and non-technical stakeholders.
• Strong analytical and problem-solving skills.
• Ability to work independently while supporting multiple programmes and stakeholders.
• CISSP, CISM, or equivalent Information Assurance certification.
• Degree in Cyber Security, Information Security, Computer Science, Engineering, or a related discipline.
• Experience within Defence, Aerospace, Government, or National Security sectors.

Addtional Requirements

• Knowledge of UK Government Security Policy Framework (SPF), NCSC guidance, JSP 440, and Defence security requirements.
• Understanding of GDPR and UK Data Protection Act requirements where applicable.
• Ability to obtain and maintain UK Security Check (SC) clearance with willingness and eligibility to achieve Developed Vetting (DV) clearance.
• Occasional UK and EMEA travel may be required.

Lockheed Martin is committed to upholding principles of equal opportunity, fostering a work environment that is aligned with our core values of integrity, respect, and exceptional performance. We recognize the importance of leveraging the unique talents and experiences of all our employees to drive innovation, deliver superior solutions, and maximize value for our customers. Our focus is on identifying the most qualified candidate for each role, regardless of their background. If you are interested in a position, we invite you to share how your skills and perspectives could bolster our team and encourage you to apply, even if you feel your qualifications do not fully meet all the job criteria outlined in our advertisement. Furthermore, Lockheed Martin is dedicated to ensuring our recruitment process is inclusive for all individuals. We are prepared to accommodate reasonable adjustments for applicants as needed. If you require assistance or adjustments to participate in the job application or interview process, please contact [e-mail] or call 02392 415270.