Security by Design Senior Consultant

Marks Sattin; Yeovil; Hybrid; GBP 136,000 - 194,000; Full time

Benefits offered by this job

Hybrid working model

Job summary

Marks Sattin is recruiting a Security by Design Consultant (SC Cleared) to support a major defence and aerospace programme in Yeovil. This hybrid role focuses on embedding secure-by-design principles across the full engineering lifecycle and delivering security artefacts and risk assessments.

You will translate customer security requirements into actionable plans, perform threat modelling, support design reviews and work closely with engineering teams to maintain secure systems throughout

Qualifications

• Experience delivering cyber security within Defence environments.
• Knowledge of Secure by Design principles and assurance activities.
• Experience producing security cases, risk assessments and assurance documentation.
• Knowledge of NIST cyber security standards and frameworks.
• Experience working with systems engineering, software engineering or product development teams.
• Ability to engage with technical and non-technical stakeholders.

Responsibilities

• Develop and maintain security documentation including security management plans, security cases, assurance artefacts and cyber risk assessments.
• Translate customer security requirements into practical plans, work packages and deliverables.
• Conduct cyber and information security risk assessments, threat modelling and vulnerability analysis.
• Support design reviews, engineering lifecycle activities and security governance forums.
• Identify, manage and escalation security risks and issues.
• Work closely with engineers, architects, developers and programme stakeholders to ensure secure-by-design principles are embedded throughout delivery.
• Support verification, validation and assurance activities.

Skills

Cyber security

Defence experience

Risk assessment

Security by Design

Stakeholder engagement

Threat modelling

Education

Cyber security qualifications

Professional certifications

Job description

Security by Design Consultant (SC Cleared)
Defence & Aerospace Programme | Yeovil | Hybrid

A leading defence and aerospace organisation is seeking an experienced Security by Design Consultant to support the delivery of a major aviation programme. Working within a multidisciplinary engineering environment, you will help ensure products, systems and associated deliverables are secure throughout the full engineering lifecycle.

Key Responsibilities

• Develop and maintain security documentation including security management plans, security cases, assurance artefacts and cyber risk assessments.
• Translate customer security requirements into practical plans, work packages and deliverables.
• Conduct cyber and information security risk assessments, threat modelling and vulnerability analysis.
• Support design reviews, engineering lifecycle activities and security governance forums.
• Identify, manage and escalation security risks and issues.
• Work closely with engineers, architects, developers and programme stakeholders to ensure secure-by-design principles are embedded throughout delivery.
• Support verification, validation and assurance activities.

Required Experience

• Significant experience delivering cyber security within Defence environments.
• Strong understanding of Secure by Design principles and security assurance activities.
• Experience producing security cases, risk assessments and assurance documentation.
• Knowledge of NIST cyber security standards and frameworks.
• Experience working alongside systems engineering, software engineering or product development teams.
• Ability to engage confidently with technical and non-technical stakeholders.

Desirable Experience

• Defence aviation, aerospace or air platform programmes.
• Knowledge of Defence security standards and accreditation processes.
• Supply chain security risk management experience.
• Experience supporting complex engineering lifecycles and formal design reviews.

Essential Requirements

• Active SC Clearance.
• Relevant cyber security qualifications and/or professional certifications.
• Ability to work on-site in Yeovil for a minimum of three days per week.

Contract Details

• Contract until the end of 2027.
• Hybrid working model.
• £120 / hour