Security and Assurance Engineer

• Salary:
  Up to £60,000 D0E
• Full Time
• Permanent

Who we are:

Sub Sea Craft is a fast growing, privately-funded, UK-based innovative maritime technology company specialising in next-generation, high-performance watercraft and systems. We operate at the intersection of advanced engineering, cutting-edge design, and user-centric innovation, delivering safe, effective, and enabling solutions for both commercial and defence applications.

• Annual Leave – Entitlement to 25 days of annual leave plus bank holidays
• Wellbeing Day - An additional Wellbeing Day each year to focus on personal health and wellbeing.
• Private Healthcare – Access to comprehensive private healthcare coverage to support your physical and mental wellbeing.
• Life Assurance and Critical Illness Cover – Comprehensive protection including Life Assurance (4x salary) and Critical Illness Cover for added financial security.
• Family Leave – Enhanced maternity and paternity pay
• Christmas Leave – A Christmas shutdown is typically observed.
• Professional Development – Commitment to ongoing learning and career growth, supported by training programmes and access to Linked In Learning.
• Pension Contribution – pension scheme with the option to contribute via salary sacrifice
• Flexible Working – Opportunities for flexible working arrangements to promote work–life balance.
• Inclusive Culture – A professional environment that values diversity, innovation, and collaboration.

• Lead the identification, assessment, and analysis of security vulnerabilities across platform systems, networks, software, and supporting infrastructure.
• Define, evaluate, and influence proportionate mitigations and protective measures that reduce security risk and improve resilience against physical, cyber, and supply-chain threats.
• Own platform Security Acceptance Cases, security assurance reports, risk assessments, and the generation and maintenance of supporting evidence.
• Collaborate with systems, software, hardware, and operations engineering teams, providing technical leadership and pragmatic security guidance throughout the design lifecycle.
• Review architectures, designs, requirements, and change proposals to identify security weaknesses and ensure that security controls are embedded from the outset.
• Ensure compliance with applicable security standards, regulations, contractual requirements, and organisational policies, such as ISO/IEC standards, Cyber Essentials Plus, DEF STAN, and NIST frameworks.
• Maintain an informed view of attacker techniques, emerging vulnerabilities, threat intelligence, and industry trends, applying this knowledge to continually improve SSC’s security posture.
• Develop and maintain threat models for relevant attack vectors, assets, trust boundaries, and abuse cases, translating findings into actionable security requirements.
• Manage incident preparedness and security testing, including the planning and coordination of physical and digital penetration testing for platform infrastructures.
• Support security incident response, investigations, lessons learned, and the implementation of corrective and preventative actions.
• Track security risks, vulnerabilities, and remediation activities, reporting progress and residual risk to relevant stakeholders.
• Promote a strong security culture through clear communication, knowledge sharing, and constructive engagement with technical and non-technical stakeholders.
• Collaborate with cross-functional teams, including mechanical, electrical, and control engineers, to achieve integrated and cohesive system solutions.

• A bachelor’s degree in computer science, computer engineering, cyber security, or a related discipline; equivalent practical experience…