Security Engineer (Contractor)

General Dynamics UK Limited; Oakdale; On-site; GBP 70,000 - 105,000; Full time

Job summary

General Dynamics Mission Systems UK is seeking a Security Engineer (Contractor) to collaborate with Technical Project Managers and the Solution Design Team to deliver security artefacts for the project. The role ensures Security is integrated into all engineering decisions and requires hands-on experience with MBSE and open architectures.

Candidates should have a defence background with IS1/IS2 and ISO27001 knowledge, and proven experience producing security designs through accreditation, plus

Qualifications

• Defence background with IS1/IS2 and ISO27001 knowledge.
• Experience producing security designs through accreditation.
• Familiar with multiple security frameworks including NIST SP 800-53, NIS Directive, NCIA, COBIT.

Responsibilities

• Create security deliverables with PMs and Solution Design Team.
• Provide security authority and guidance to the project.
• Maintain project level security documentation and assurance outputs.
• Liaise with customer Security representatives and manage traceability to requirements.
• Support secure configuration and integration activities.

Skills

Security Engineering

Risk assessment

Security architecture

Stakeholder liaison

Tools

IS1/IS2

ISO27001

NIST SP 800-53

NIS Directive

SABSA/COBIT

Job description

Company Description

General Dynamics Mission Systems engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of more than 13,000 top professionals, we partner with the best in industry to expand the bounds of innovation in the defence and scientific arenas. In the UK, we are leading the way in avionics and communication systems. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency.

General Dynamics Mission Systems engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of more than 13,000 top professionals, we partner with the best in industry to expand the bounds of innovation in the defence and scientific arenas. In the UK, we are leading the way in avionics and communication systems. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency.

Job Description

We are hiring a Security Engineer (Contractor).

• Work with the Technical Project Managers and the Solution Design Team to create required security deliverables for the project.
• Provide security authority and guidance to the project, ensuring Security is part of all Engineering decisions.
• Support the generation and maintenance of project level security documentation
• Develop and support assurance for all project Security outputs.
• Hands on experience of Model Based System Engineering
• Development and implementation of open architectures
• Deliver a coherent, integrated, and layered Security Architecture.
• Ensure risks and issues are within the boundaries of the Accreditors risk appetite through identification of appropriate risk mitigations.
• Liaise as required with the customer Security representative and produce supporting artefacts for SyTLMs.
• Traceability of security design to requirements
• Assist in the conduct of secure configuration and integration activities.
• Work with the wider Design team to ensure implementations are compatible with the Security Design.
• Work with the wider test team to provide evidence from security functional tests

Qualifications

Ideal candidates will come from a defence background, with experience implementation and compliance with Security Architectural Frameworks such as: Infosec Standard 1&2 (IS1&2), ISO27001 and excellent knowledge of security defence standards, policies and guidelines.

The candidate will have experience in large, complex systems across all phases of the project lifecycle in a security context and will have produced security designs, and successfully have taken these through accreditation, and into support.

Previous experience of implementation and compliance with any of the following Security Architectural Frameworks:

• System Administration and Networking and Security (SANS) Institute Framework;
• National Institute of Standards Technology Framework SP 800-53;
• National Institute of Standards Technology Cyber Security Framework
• NATO Communications Information Agency (NCIA) Standards;
• ISO 27001 (2013); BS ISO/IEC 27001:2013;
• Infosec Standard 1&2 (IS1&2);
• European Directive on security of Networks and Information Systems Directive (NIS Directive); and any other demonstrably relevant standard or framework (SABSA, COBIT etc.)

Additional Information

General Dynamics Mission Systems utilises QDOS IR35 Status Review. The requirements of this contract have been evaluated as Outside IR35 – Prior to the engagement start you will need to complete a status questionnaire in order to receive the finalised status determination.

All successful/appointed applicants must be able to obtain a level of UK Security clearance that is appropriate for the role and undertake suitable Right to work checks.