Cyber Security & Assurance Engineer

Position: Cyber Security &  Assurance Engineer

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Government Administration and IT Services and IT Consulting

Description

Cyber Security & Assurance Engineer (T3)

Location:

F/T on site to Huntingdon, UK

Clearance:
High - DV 'Developed Vetting'

We’re seeking an Information Assurance Engineer ready to take on diverse, high impact projects. You’ll provide support to customer programmes including PITSM, MPS, HOB, and others across Logistics, Civil, and National Security Defence & Intelligence in the UK. You must be based in the UK with DV Clearance (additional clearances may be required).

We are seeking individuals to join a high performing team and confidently deliver trusted security solutions across a diverse range of complex, high value projects. Our goal is to provide security that is quietly effective, highly assured, and free from unnecessary complexity; simple, reliable protection that our customers truly value. The role will contribute to delivering robust, well managed assurance solutions for our customers’ sensitive programmes.

The initial deployment on PITSM will involve extensive third party and customer liaison, requiring strong communication and relationship building skills. This work will bring variety to your day to day responsibilities and operating within flexible parameters in an agile environment will demand effective scheduling and prioritisation to maintain service quality. Beyond PITSM we expect to develop further information assurance opportunities as our customer base and each of the projects we deliver continue to expand, including the use of common tooling that will facilitate the tracking and reporting of assurance actions.

We are also developing NIST compliant risk assessment methodology and tooling that is raising our quality and customer confidence, you will be part of these developments. The role in PITSM and likely other projects later will be responsible to the cyber lead for project outcomes and to help with career planning and personal development for junior members of the team.

The ideal candidate will support the wider Leidos security capability, beyond Information Assurance, joining a talented and multifaceted cyber team with a reach across our UK business delivering on our customer commitments and seeking out great opportunities to deliver great security by design.

Candidate Essentials

• British - non-dual national – many of our projects have nationality restrictions
• DV cleared – or Candidates should be willing to undergo DV Clearance.
• Experience in delivering accredited security solutions in sensitive government scenarios

Essential Skills & Experience Risk & Assurance

• Strong grasp of Confidentiality, Integrity, Availability & Safety (CIA+S), with practical risk management experience
• Experience in assurance processes for secure/sensitive systems using structured risk analysis
• Continuous assurance through implementation of NIST-based Information Security Management System (ISMS) controls and processes.
• Evaluating responses to security requirements for systems
• Maintaining security documentation sets (SyOPS, RMADs, Security Management Plans etc.)

Lifecycle & Methodologies

• Experience of the IT systems engineering lifecycle
• Understanding of lifecycle processes (requirements management, configuration management, testing, assurance) and how cyber assurance integrates
• Knowledge of methodologies (Waterfall, Incremental, SAFE, Dev Ops)
• Experienced in managing ITHC activities end-to-end, from initial scoping through remediation

Incident Response & Awareness

• Experienced in developing and managing Cyber Incident Response capabilities, including planning, implementation, and continuous improvement
• Proven experience designing and delivering Security Awareness programs, incorporating threat modelling, tabletop exercises, and war-gaming scenarios

Desirable Skills & Experience Domain & Delivery Experience

• Experience working in both delivery and proposal environments
• Experience working in MOD AS environments

Technology Skills & Experience

• Principles of network and boundary protection (firewalls, mail gateways, load balancers, antivirus, IPS/IDS, Diodes)
• Pr…