Security Consultant

IBM SiXworks; Farnborough; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

25 days annual leave

Private Medical cover

Life Assurance

Generous pension (10% employer, 5%员工)

Job summary

SiXworks is seeking a Security Consultant to design, build, and deliver secure digital solutions in highly secure environments. You will work with engineers, architects and delivery specialists to enable faster, safer decision-making for critical operations.

Essential experience includes risk assessments (NIST/ISO 27005), producing risk treatment plans, audits/support, and security documentation. Knowledge of MOD policies and Agile/DevSecOps is required; UK Security Clearance eligibility is

Qualifications

• Experience of risk assessments using industry methodologies (e.g., NIST, ISO 27005).
• Producing risk treatment plans aligned to security objectives.
• Experience supporting audits, control testing, and evidence gathering.
• Creation of security documentation (Security Aspects of Design, Risk Assessments, Risk Management Plans, Security Policies, Security Test Plans/Results).
• Ability to translate technical security risks into business language for senior stakeholders.
• High standards in written reports and design documentation.
• Knowledge of MOD policies JSP 440, 453/604, 892.
• Knowledge and experience of Agile, DevSecOps, CI/CD principles in secure environments.
• Experience with MOD Cyber Assurance/Accreditors.

Responsibilities

• Design, build, and deliver secure digital solutions in highly secure environments.
• Collaborate with engineers, architects, and delivery specialists to enable faster, safer decision-making for critical operations.
• Perform Cyber Risk Management within Defence and Security Sector.
• Provide strategic security governance, risk and compliance direction for projects.
• Engage with MOD stakeholders to identify key security objectives and requirements.
• Work with Software Eng., DevSecOps, Infrastructure Eng., Agile Development, and Support teams to achieve security outcomes.

Skills

Risk assessment

Security governance

Audit support

Security documentation

Business risk translation

Written reporting

Agile/DevSecOps/CI-CD

MOD policies knowledge

Stakeholder engagement

Job description

Work on Technology That Protects What Matters

At SiXworks, we build secure digital solutions that support Defence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter.

We're looking for a Security Consultant who enjoys solving difficult technical challenges and wants their work to have real operational impact.

What You'll Do

As a Security Consultant, you'll help design, build, and deliver secure digital solutions in highly secure environments. You'll work alongside engineers, architects, and delivery specialists to develop technology that enables faster, safer decision-making for critical operations.

Your key responsibilities will include the following:

• Cyber Risk Management within a Defence and Security Sector.
• Providing strategic security governance, risk and compliance (GRC) direction of projects.
• Engagement with relevant stakeholders across the MOD, including project teams, users and policy owners to identify key security objectives and requirements.
• Work closely with various teams across the business (Software Engineering, DevSecOps Engineering, Infrastructure Engineering, Agile Development, Support) to achieve security outcomes.

What We're Looking For

We value people who take ownership, think critically, and enjoy working as part of a collaborative team tackling complex challenges. You don't need to tick every box, but we're particularly interested in people with skills/experience as described below.

Essential experience includes:

• Experience of working on risk assessments using industry approved methodologies (such as NIST, ISO 27005).
• Producing clear, actionable risk treatment plans aligned to security objectives to treat /mitigate the identified risks.
• Experience supporting compliance and assurance activities, including audits, control testing, and evidence gathering
• Creation of security documentation to support the development of an information system, these could include: Security Aspects of Design, Risk Assessments, Risk Management Plans, Security Policies, Security Test Plans/Results.
• Ability to translate technical security risks into business language for senior stakeholders and decision-makers
• High standards in written report and/or design documentation.
• Knowledge of MOD policies (JSP 440, 453/604, 892).
• Knowledge and experience of Agile, DevSecOps, CI/CD principles and their application in secure environments
• Experience of working with MOD Cyber Assurance/Accreditors.

Just as important are curiosity, strong problem solving ability, and the motivation to continuously improve how technology is designed and delivered.

About SiXworks

SiXworks is a specialist digital innovation partner delivering secure, mission-critical technology to Defence and National Security organisations. We focus on digital experimentation, secure-by-design architecture, cloud technologies, and rapid application development to help our customers move faster and stay ahead of evolving challenges.

Our team combines expertise from across technology, business, and operational backgrounds including the armed forces creating a collaborative environment where practical thinking and innovation thrive.

Why Join Us

Our culture is guided by six principles: Agility, Security, Innovation, Quality, Collaboration and Inclusivity our North Star for how we work. SiXworks is a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail-safe-fast cutting-edge technology solutions deployed in highly secure environments.

As an end-to-end digital innovation and delivery partner, we turn complex challenges into mission-critical digital advantages. This is a thrilling time for us, with ambitious plans for growth. We are looking for brilliant, experienced, driven and self-motivated people to join the team on our journey.

We offer competitive salaries and a package that supports your wellbeing and development, including 25 days annual leave + bank holidays, free Private Medical cover and Life Assurance, Generous pension (10% employer, 5% employee contribution), Bonus and Professional development and training support. In addition to secure parking, gym, café & restaurant on site and lots of open break out spaces.

A word on UK Security Clearance

Due to the secure nature of the position and working environment, you must have or be eligible to obtain the highest level of Security Clearance. More details relating to UK Security Clearance can be found here:

United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk)