Security and Assurance Engineer

Resource Area for Teaching; Portsmouth (NH); On-site; USD 48,000 - 79,000; Full time

Benefits offered by this job

Annual leave

Wellbeing day

Private healthcare

Life assurance

Family leave

Christmas leave

Professional development

Pension

Flexible working

Inclusive culture

Job summary

SubSea Craft in the United Kingdom is seeking a senior security engineer to lead the identification, assessment and mitigation of security vulnerabilities across platform systems, networks, software and infrastructure. You will own security acceptance cases, risk assessments and assurance reports, and guide engineering teams through design lifecycle with pragmatic security leadership.

Responsibilities include reviewing architectures, embedding controls from the start, maintaining threat models,

Qualifications

• Bachelor's degree or equivalent practical experience in security or engineering.
• Significant experience in security engineering, systems engineering, platform assurance or similar.
• Experience identifying vulnerabilities and defining mitigations across complex platforms.
• Experience producing security assurance cases, risk assessments, technical reports, and briefings.
• Knowledge of secure-by-design, threat modelling, vulnerability management and incident response.
• Familiarity with ISO/IEC 27001, Cyber Essentials Plus, DEF STAN, NIST SP 800-171.
• Ability to influence design decisions with multidisciplinary teams.
• IEng/CEng or equivalent desirable; Jira/Confluence familiarity desirable.

Responsibilities

• Lead identification, assessment, and analysis of security vulnerabilities across platforms.
• Define mitigations and protective measures to reduce risk and improve resilience.
• Own security acceptance cases and risk assessments with supporting evidence.
• Collaborate with systems, software, hardware, and operations teams providing security guidance.
• Review architectures and change proposals to embed security controls from the start.
• Ensure compliance with security standards, regulations, and contractual requirements.
• Maintain awareness of attacker techniques and industry trends to improve posture.
• Develop threat models and translate findings into actionable requirements.
• Coordinate security testing including physical and digital penetration testing.
• Support incident response, investigations, lessons learned, and corrective actions.
• Track risks and remediation activities; report progress to stakeholders.
• Promote a strong security culture and cross-functional collaboration.
• Work with mechanical, electrical and control engineers for integrated solutions.

Skills

Security engineering

Systems engineering

Platform assurance

Vulnerability management

Incident response

Threat modelling

Security testing

Penetration testing

ISO/IEC 27001

NIST SP 800-171

DEF STAN

Education

Bachelor's degree in computer science / computer engineering / cyber security

Equivalent practical experience in security/engineering

Tools

Jira

Confluence

3rd party test facilities

Job description

Job Description

• Salary: Up to £60,000 D0E
• Full Time
• Permanent

Who we are: SubSea Craft is a fast growing, privately-funded, UK-based innovative maritime technology company specialising in next-generation, high-performance watercraft and systems. We operate at the intersection of advanced engineering, cutting-edge design, and user-centric innovation, delivering safe, effective, and enabling solutions for both commercial and defence applications.

What we offer

• Annual Leave – Entitlement to 25 days of annual leave plus bank holidays
• Wellbeing Day - An additional Wellbeing Day each year to focus on personal health and wellbeing.
• Private Healthcare – Access to comprehensive private healthcare coverage to support your physical and mental wellbeing.
• Life Assurance and Critical Illness Cover – Comprehensive protection including Life Assurance (4x salary) and Critical Illness Cover for added financial security.
• Family Leave – Enhanced maternity and paternity pay
• Christmas Leave – A Christmas shutdown is typically observed.
• Professional Development – Commitment to ongoing learning and career growth, supported by training programmes and access to LinkedIn Learning.
• Pension Contribution – pension scheme with the option to contribute via salary sacrifice
• Flexible Working – Opportunities for flexible working arrangements to promote work–life balance.
• Inclusive Culture – A professional environment that values diversity, innovation, and collaboration.

Responsibilities will include

• Lead the identification, assessment, and analysis of security vulnerabilities across platform systems, networks, software, and supporting infrastructure.
• Define, evaluate, and influence proportionate mitigations and protective measures that reduce security risk and improve resilience against physical, cyber, and supply-chain threats.
• Own platform Security Acceptance Cases, security assurance reports, risk assessments, and the generation and maintenance of supporting evidence.
• Collaborate with systems, software, hardware, and operations engineering teams, providing technical leadership and pragmatic security guidance throughout the design lifecycle.
• Review architectures, designs, requirements, and change proposals to identify security weaknesses and ensure that security controls are embedded from the outset.
• Ensure compliance with applicable security standards, regulations, contractual requirements, and organisational policies, such as ISO/IEC standards, Cyber Essentials Plus, DEF STAN, and NIST frameworks.
• Maintain an informed view of attacker techniques, emerging vulnerabilities, threat intelligence, and industry trends, applying this knowledge to continually improve SSC’s security posture.
• Develop and maintain threat models for relevant attack vectors, assets, trust boundaries, and abuse cases, translating findings into actionable security requirements.
• Manage incident preparedness and security testing, including the planning and coordination of physical and digital penetration testing for platform infrastructures.
• Support security incident response, investigations, lessons learned, and the implementation of corrective and preventative actions.
• Track security risks, vulnerabilities, and remediation activities, reporting progress and residual risk to relevant stakeholders.
• Promote a strong security culture through clear communication, knowledge sharing, and constructive engagement with technical and non-technical stakeholders.
• Collaborate with cross-functional teams, including mechanical, electrical, and control engineers, to achieve integrated and cohesive system solutions.

Qualifications and Experience

Required

• A bachelor’s degree in computer science, computer engineering, cyber security, or a related discipline; equivalent practical experience in a security or engineering role will also be considered.
• Significant professional experience in security engineering, systems engineering, platform assurance, or a comparable role within defence, aerospace, critical national infrastructure, or another security-critical environment.
• Practical experience identifying vulnerabilities, assessing risk, developing security requirements, and selecting or validating proportionate mitigations across complex platforms and infrastructure.
• Experience producing security assurance cases, risk assessments, technical reports, compliance evidence, and clear briefings for technical and senior stakeholders.
• Working knowledge of secure-by-design principles, threat modelling methodologies, vulnerability management, incident response, security testing, and penetration-testing lifecycles.
• Knowledge of relevant security standards and frameworks, including ISO/IEC 27001, Cyber Essentials Plus, DEF STAN 05-138, NIST SP 800-171, and applicable risk-management principles.
• Ability to communicate complex security issues clearly, influence design decisions, and work effectively with multidisciplinary engineering and delivery teams.
• Industry certification such as CISSP, CISM, CompTIA Security+, CySA+, SABSA, or an equivalent professional qualification is desirable.
• Experience of security assessments, penetration testing, incident investigations, or security accreditation within regulated or safety-critical environments is desirable.
• Commitment to maintaining professional knowledge of evolving threats, defensive technologies, security standards, and regulatory expectations.
• Desirable to be conversant with Jira and Confluence
• Desirable to have experience with marine or autonomous.
• Desirable to have experience of using 3rd party test facilities to deliver assurance evidence.
• Professional registration (IEng / CEng) or working towards is desirable

Note: Due to the nature of work undertaken at SubSea Craft, the selected candidate must be capable of meeting the security requirements of the position, which would include as a minimum existing right to live and work in the UK, Baseline Personnel Security Standard (BPSS), with UK National security clearance required for certain roles.*

Values

Our people are our greatest asset, we continually strive to provide an excellent working environment to enable our team to do their best work. We have an agile professional workforce: we are founded on the belief that our people are valued and our business is trusted, inclusive and commercially-adept.

What we expect from you

• Teamwork, mutual respect and collaboration
• Initiative and independent working
• Honesty and integrity
• Business and commercial awareness
• Agility, adaptability and continuous development

We are committed to building an inclusive, diverse workplace where everyone can thrive. If you require any support or adjustments to interact with us, please let us know.

*Please note that all offers of employment are conditional and subject to satisfactory DBS, driving license and reference checks. A criminal record will not automatically disqualify candidates from employment. We will consider criminal record information alongside the wider range of evidence gathered at the application, interview, and pre-employment checking stages.

For details of how we process your personal data, please refer to our Privacy Notice.