Senior Systems Security Engineer

The Future Joint Command and Staff Trainer (FJCAST) programme will transform the delivery of senior staff training, enabling Joint Headquarters, operational commands, coalition partners and allied nations to train together across Land, Maritime, Air, Space and Cyberspace domains. Through the integration of simulation, synthetic environments, exercise design, data exploitation, operational networks and coalition interoperability, FJCAST will support the training, preparation, experimentation and evaluation of UK and allied operational headquarters.

To assist with this, we have an exciting opportunity for a Senior Systems Security Engineer to provide the functional security governance, management and support to the Delivery Team across our FJCAST programme. This is a key role in collaboratively working with the Engineering functional delivery teams in delivering optimal training solutions and services to the Customer, to schedule at the right cost, meeting quality, safety and security standards as necessary., Your day-to-day activities may include: Performing Task Lead duties (e.g., task planning, product owner, scrum master); Supporting the development of a Security Risk Management Framework (RMF) following the STRIDE model; Create suitable Secure by Design (SbD) planning and implementation policies and procedures to ensure all delivered systems are designed, implemented and operated using a SbD approach; Developing top-level system security requirements, and flowing down requirements and implementation concepts (SbD); Be part of the team who interacts with customers to define / refine requirements, solutions, trades, costs, implementation, system impacts, and effectiveness within an agreed schedule; Support developing plans and estimates, task execution, project tracking, reporting, and risk identification and mitigation plans; Identify / produce evidence to enable the successful assessment of systems in order to achieve the Authority to Operate (ATO) and allow for through life and end of life security management; Involvement in security testing with a view to obtaining ATO; Define, implement and or assess security solutions that meet the customer's requirements and security posture; Consult and assist program line management with security architectures, SbD and security risk / problem / issue management; Show an understanding of Attack Threat Modelling / Critical Program Information Assessments; Understanding of Security Impact Assessment with reference to Change Management; Understanding, and compliance with, MoD technology release and export licensing policies; Supporting the development of bids and proposals; and Candidate must exhibit an exceptional degree of ingenuity, creativity and resourcefulness; Typically a Bachelor of Science degree (BSc) in Science, Technology, Engineering, or Mathematics (STEM) and 10 years of prior relevant experience, or a Masters Degree (MSc) in a related field and 7 years of prior relevant experience.

In absence of a degree, 14 years of relevant experience is required; Evidence of experience in the fields of computer technology reverse engineering, or other systems security engineering fields; Experience generating Security and/or Cyber Security requirements, design and architecture artifacts, plans, and policies; Experience of Information Assurance; Technical leadership experience; Experience in Systems Engineering, including any of the following: System Requirements definition and analysis; System Test and Analysis; Systems Engineering Studies; and NIST Risk Management Framework (RMF) or STRIDE.

Experience in systems security including but not limited to various computer hardware and software S/W operating system and application solutions in both a stand-alone and in LAN/WAN configurations and / or Security features and/or vulnerability analysis of various operating systems; and, Suitable active and transferable security clearance. Qualifications We Value: Experience in design, development