Technical Cyber Security Assurer

Summer Browning; Greater London; Hybrid; GBP 111,000 - 129,000; Full time

Job summary

Summer-Browning Associates seeks a Technical Cyber Security Assurer for an initial 6-month assignment in London/Milton Keynes with Hybrid/Remote options. Active security clearance and a strong background in cyber security assurance within a high-threat government environment are preferred.

The role involves producing GovAssure and Secure-By-Design assessments, working with security architecture and SIEM tools, and applying frameworks such as NCSC CAF, ISO 27001, NIST, COBIT, SABSA and TOGAF.

Qualifications

• Experience producing GovAssure and Secure-By-Design assessments.
• Knowledge of security architecture and SIEM tools (Splunk, Defender, Sentinel, ELK, Tenable).
• Understanding of threats, attack vectors, vulnerabilities and controls.
• Familiarity with NCSC CAF, ISO27001, NIST, COBIT, SABSA and TOGAF.
• Experience with risk and threat modelling in high-threat government environments.
• Industry certifications (CISSP, CISM, CEH, GIAC) preferred.

Skills

GovAssure

Secure-By-Design

Threat modelling

Risk assessment

Security governance

Cybersecurity risk management

Security architecture

ISSM/CSOC concepts

High-threat gov envs

Tools

Splunk

Defender

Sentinel

ELK

Tenable

Job description

Technical Cyber Security Assurer

Summer-Browning Associates is currently supporting our central government client, who is seeking a Technical Cyber Security Assurer for an initial 6-month assignment with the option to extend.Location: London / Milton Keynes / Hybrid / Remote The ideal candidate will have an active Security clearance and a strong background in Cyber Security Assurance within a high-threat government environment.

Skills and experience.

• Experience in producing GovAssure and Secure-By-Design assessments, including Risk Assessment Papers, Risk Treatment Plans, Risk Business Cases, and Security Management Plans.
• Knowledge and experience with security architecture and Security Information and Event Management (SIEM) tools, such as Splunk, Defender, Sentinel, ELK, and Tenable Threat Modelling System solutions.
• Extensive understanding of cybersecurity threats, attack vectors, vulnerabilities, and security controls.
• Demonstrable knowledge of cybersecurity frameworks and standards, including the NCSC Cyber Assessment Framework, ISO 27001, NIST, COBIT, as well as SABSA and TOGAF.
• Experience in risk and threat modelling within high-threat government environments.
• Preferred Qualifications: Industry certifications such as CompTIA Security+, CISSP, CISM, CEH, or GIAC are highly desirable.