Security Assurance Engineer

Rheinmetall; Warminster; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Flexible Working

BUPA Healthcare & Dental Care

25 Days holiday + Bank holidays

Long Service Rewards

Enhanced Pension contributions

Cycle to Work

Excellent Training Opportunities

Staff social events

Job summary

OMNIA Training in the UK is seeking a Security Assurance Engineer to safeguard information assets across the REUK workshare and related ITEA activities. The role focuses on Information Assurance, cyber security and risk management within a high-impact defence programme.

The successful candidate will liaise with customers and delivery teams in a matrix organisation, ensuring industry best practice and customer security requirements are implemented.

Qualifications

• Experience briefing and chairing meetings with customers and suppliers.
• Ability to prioritise and plan complex work in a rapidly changing environment.
• Understanding and applying security requirements and IA processes.

Responsibilities

• Adhere to security vision, requirements, standards and roadmaps to deliver assurance.
• Lead security interactions with stakeholders on behalf of Configuring Service.
• Support security assurance of systems across the project lifecycle.
• Capture, expand and analyse new security requirements and demonstrate compliance.
• Design and support IA implementations for secure cloud and on-prem solutions.
• Drive security evaluations and proof-of-concepts (PoCs).
• Assess security risk across applications and systems lifecycle.

Skills

Briefing meetings

Prioritisation

Critical thinking

Communication skills

Security requirements

IA processes

Secure by Design

Defence security standards

Risk management

Cloud hosting knowledge

DevSecOps tooling

Job description

What We Are Looking For

At OMNIA Training, we’ve brought together some of the UK’s most innovative defence training organisations into a single consortium to delivery one powerful mission: to transform the British Army’s training system and create the best-trained Army in the world.

OMNIA Training will redefine the British Army’s collective training, standing up as the Army’s Strategic Training Partner. To do that, we are looking for the best and brightest minds from across the UK. We are backed by British innovation and powered by world-class experts, like you.

OMNIA Training is primed by Raytheon UK, but all five partners (Raytheon, Rheinmetall, Capita, Skyral and Cervus) are key to delivering the scope of the contract.

This is more than a job — it’s a mission. You will be part of a high-impact, collaborative environment, where we expect everyone to live the values and standards of the British Army. Every person in our team plays a critical role in delivering OMNIA Training’s vision; designing, delivering, and transforming collective training so the British Army is ready to fight and win.

The role

This role is the Security Assurance Engineer, who is responsible for the Security Assurance of the REUK workshare but will also support the Configuring Service Integrated Test, Evaluation and Acceptance (ITEA) team with the Security Assurance aspects of the products under review and/or those imminently ready to enter the Configuring Service.

Reporting

This position reports directly to the Configuring Service Lead.

Job Description

The Omnia Security Engineer role requires a versatile individual who can make effective and highly valued contributions to activities across the project lifecycle in collective training and IT environments. The candidate is expected to be capable of operating in a technical role working closely with customer and delivery teams; alone and unsupervised if necessary. This position is critical to the successful delivery of the Collective Training Transformation Programme (CTTP), ensuring that training is delivered to meet the British Army’s needs. This role concentrates on Information Assurance and Cyber Security.

The successful candidate will be responsible for ensuring programme security and information assets are protected through policy, procedural and technical enhancements. You will be comfortable working in a matrix management organisation and will act as the trusted security advisor to the programme by ensuring industry best practice and customer security requirements are implemented with regards to Information Assurance (IA), cyber security and risk management. You will be required to design and support implementation and provide ongoing IA support of secure cloud solutions as well as on premises solutions as required.

Responsibilities Tasks

• Adhering to the Omnia security vision, threat-modelling, security requirements, security standards, reference architectures, security strategies and roadmaps; in order to deliver security assurance
• Lead security interactions on behalf of the Configuring Service with internal and external stakeholders
• Supporting security assurance of systems
• Security Requirements Management from; Capturing, expanding, and analysing new requirements through to delivery and demonstrating compliance to them
• Developing innovative security solutions to be in alignment with the customer’s risk posture
• Driving security technology evaluations and proofs-of-concepts.
• Evaluating and assessing security risk including application and system lifecycle management
• Advising on Cybersecurity issues, systems, processes, products, and services
• Maintaining oversight of the design, implementation and through-life security assurance

What Qualifications You Should Have

Skills & Experience

Essential

• Forward facing – experienced in briefing/chairing meetings/steering groups with customers and suppliers
• Self-starter with the ability to appropriately prioritise and plan complex work in a rapidly changing environment
• Strong critical thinker with problem solving aptitude
• Highly organised, discrete, outcome focussed, with a “can do” attitude
• Strong communication skills (oral, presentation and written)
• Understands security requirements and how to decompose them
• Knowledge of IA processes and procedures
• Understanding/experience of Secure by Design, Defence Standard 05-138 and Defence Condition 658
• Supporting the development of Risk Management Framework documents and controls
• Understanding how obsolescence impacts IA
• Understanding of formulating, recording and managing security risk
• Understanding/experience of waterfall and agile methodologies
• Able to articulate and solve complex security problems and concepts, by interrogating and using data or intelligence to formulate and influence plans
• Able to interpret complex and diverse business and technical requirements and issues, and identify and communicate viable solutions or controls
• Strong management of stakeholders’ expectations across high-risk and complexity or under constrained timescales
• Understanding of formulating, recording and managing security risk and applying risk methodologies
• Contribute to and inform identification of new technology, new security advances and new security risks to best develop future solutions
• A working knowledge of MoD or Government IT Security environments and requirements at various classifications
• Collaborative approach to teamwork - able to constructively challenge
• Support developing plans and estimates, task execution, project tracking, reporting, and risk identification and mitigation plans
• Broad understanding or a qualification in Cloud hosting and Cloud architectures for one or more major Cloud providers
• Experience in, or knowledge of, DevSecOps Tooling and Processes
• A working knowledge of MoD or Government IT Security environments and requirements at various classifications.

Desirable

• Information Security or significant commercial experience in a programme security environment
• Professional Information Security certifications in at least one of the following: CISSP, CISM, CRISC, CGRC
• Demonstrable knowledge of Government Standard 007: Security, ISO 27001 and NIST
• Strong communication skills (oral, presentation and written)
• Experience or knowledge of Supply Chain security management
• Competencies in security awareness and education programmes
• Passion for Information Security and continuous learning
• Problem management and/or ITIL experience.
• Knowledge of GEOINT and SIGINT, ACINT, MASINT, OSINT, HUMINT and the analysis of the data and information.

Personal Attributes

We are looking for individuals who want to serve. You’ll have a mission focus, and the enthusiasm and drive to ‘get things done’. You’ll want to work in collaboration with other defence training organisations, and the British Army.

You won’t let bureaucracy get in the way of what needs to be done, you’ll learn lessons and share these lessons across the team. You won’t necessarily have a military background, but you’ll understand what it means to serve and to put the mission first.

What We Offer You

We want REUK to be the employer you choose to build your career with. We have lots of opportunity to grow as our business continues to grow.

We are proud to be a Disability Confident employer, committed to fostering an inclusive and supportive workplace for all.

We are proud supporters of the Armed Forces Community.

We welcome applications from Veterans, Reservists, Cadet Force Adult Volunteers and military spouses and partners.

We are passionate about finding the right people to join us and we want you to be proud to work with us. Our vision is to become a recognised and respected solution provider while delivering high-technology, high reliability & high-quality products and systems.

As an REUK Employee we offer you

• 25 Days holiday plus Bank holidays (increasing with service)
• Flexible Working
• 4-times Death-in-Service Scheme (3 months of service)
• BUPA Healthcare & Dental Care Insurance (after successful completion of probation period)
• Long Service Rewards with additional holidays
• Enhanced Employer Pension contributions of 6.8%
• Salary sacrifice schemes for Cycle to Work
• Excellent Training Opportunities
• Recommend a friend scheme
• Buying & Selling of Annual Leave
• Staff social events throughout the year
• Recognition for your work

Eligibility

Applicants must be willing to work within the Defence sector and undertake Baseline Personnel Security Standard (BPSS) and Security Clearance (SC) checks, if not already held.