Cyber Security Airworthiness Consultant

Cyber Security for Airworthiness Consultant

Cyber Security for Airworthiness Consultant

£60,000 - £75,000 per annum

Bristol, Burton-on-Trent, Manchester or Glasgow, with hybrid working and travel to client sites as required.

Frazer-Nash operates a flexible hybrid working model, with time split between the office, client sites and home working.

We encourage early applications, as vacancies may close once we receive sufficient applications.

Frazer-Nash is looking for a Cyber Security for Airworthiness Consultant to help clients understand and manage cyber security threats that could affect aircraft safety and airworthiness. Working at the intersection of cyber security, systems engineering, functional safety and certification, you will support a range of civil and defence aviation programmes throughout the system lifecycle.

You will collaborate with multidisciplinary teams to assess the safety impacts of intentional unauthorised electronic interaction and develop robust assurance evidence to support airworthiness and certification decisions.

This is an engineering assurance role rather than a traditional enterprise IT security position. It requires the ability to connect cyber threats and vulnerabilities to aircraft functions, system architectures, hazards, development assurance activities and continued airworthiness considerations.

You will lead technical activities, deliver high-quality outputs to agreed time, cost and quality objectives, contribute to technical assurance, support the development of junior colleagues and help build long-term client relationships and future business opportunities.

• Lead and deliver Cyber Security for Airworthiness (CSA) activities across aircraft and system life cycles.
• Develop and review security plans, scope definitions and assurance artefacts, including PSecAC, ASSD and SSSD documentation.
• Conduct security risk assessments, threat analysis and attack path assessments at aircraft, system and equipment level.
• Derive, allocate and verify security requirements and supporting assurance evidence.
• Review supplier outputs and provide independent assurance, technical guidance and intelligent customer oversight.
• Support continued airworthiness activities, including vulnerability management, configuration control and security monitoring.
• Build trusted client relationships and contribute to business development, bids, methodologies and capability growth.

The Successful Candidate Will Apply, Interpret And Work With a Range Of Aviation Cyber Security, Safety And Certification Standards. Experience Across Some, Rather Than All, Of The Following Is Expected

• EUROCAE ED-202A / RTCA DO-326A
  - Airworthiness Security Process Specification.
• EUROCAE ED-203A / RTCA DO-356A
  - Airworthiness Security Methods and Considerations.
• EUROCAE ED-204 / RTCA DO-355 - Information Security Guidance for Continuing Airworthiness.
• SAE ARP
  4754A/B
  - Guidelines for Development of Civil Aircraft and Systems.
• SAE ARP
  4761A
  - Safety Assessment Processes for Civil Airborne Systems and Equipment.
• EUROCAE ED-12C / RTCA DO-178C
  - Software Considerations in Airborne Systems and Equipment Certification.
• EUROCAE ED-80 / RTCA DO-254 - Design Assurance Guidance for Airborne Electronic Hardware.
• EUROCAE ED-14G / RTCA DO-160G
  - Environmental Conditions and Test Procedures for Airborne Equipment.
• Applicable EASA, UK CAA, FAA and Military Aviation Authority regulations, policies and acceptable means of compliance.
• Defence standards and safety management requirements relating to military air systems.

• Degree qualified, or equivalent practical experience, in aerospace, systems, software, electronics, cyber security, safety engineering or a related discipline.
• Experience in airworthiness, aircraft system development, safety assurance, cyber security engineering or certification activities.
• Ability to understand and communicate how cyber security risks can impact aircraft functionality, operational outcomes, hazards and safety objectives.
• Experience producing or assessing structured engineering evidence with clear requirements, assumptions, traceability and verification.
• Understanding of systems engineering life cycles, architectures, interfaces, configuration management and change control processes.
• Ability to produce clear technical documentation and communicate complex risk and assurance issues to both technical and non-technical stakeholders.
• Strong verbal and written…