Security Design Consultant

We are working recruiting for an experienced Security By Design Consultant to support a major customer‑facing aviation programme delivering one of the company's core products to an existing customer. Working as part of a specialist Cyber & Information Security team, you will support the delivery of secure engineering solutions across the full engineering lifecycle, from requirements through to in‑service support and maintenance.

• Support cyber and information security delivery across the engineering lifecycle
• Translate customer requirements into actionable security management plans and deliverables
• Conduct cyber and information security risk assessments and threat analysis
• Manage and escalate technical and delivery risks
• Support Security Working Groups and customer security work streams
• Work closely with engineers, architects and developers to deliver secure‑by‑design solutions
• Deliver work packages to agreed time, cost and quality targets

• Experience in a similar Defence‑related cyber security role
• Strong experience in secure software design and high integrity systems
• Knowledge of MOD Secure by Design processes (ISN
  2023/09)
• Experience with NIST SP 800‑30, 37, 53 and supply chain risk management (NIST)
• Experience with Def Stan 05‑138 / 05‑139 and aviation security standards including RTCA DO‑326A/B
• Proven experience in threat modelling, vulnerability analysis and security risk assessment
• Ability to work independently and communicate effectively with customers and stakeholders

• Degree in Cyber Security, Systems Engineering, Software Engineering or comparable experience
• Two recognised cyber security certifications such as CISSP, CISM, CASP/Security
  
  X or ChCSP
• Knowledge of engineering lifecycle gate reviews
• Experience with Crypto technologies, COMSEC and MOD/NCSC standards
• Knowledge of ARP
  4754A / ARP
  4761

The successful candidate will either already have active SC clearance or will be able to secure this quickly as this is required before a start date can be confirmed.