Information Security Engineer

- British - Non-dual national (many of our projects have nationality restrictions) - DV cleared - Willingness to undergo additional personnel security clearances (SPC) - Experience in delivering accredited security solutions in sensitive government scenarios - Familiarity with the IT systems engineering lifecycle - Understanding of controlling processes for systems engineering (requirements management, configuration management, testing and assurance) - Knowledge of different lifecycles/methodologies (waterfall, incremental, SAFE, DevOps) - Experience managing ITHC activities throughout the lifecycle (scoping, coordination, remediation management) - Solid understanding of Confidentiality, Integrity, Availability, and Safety (CIAS) - Practical experience in risk management and response to events/changes - Knowledge of processes for gaining and maintaining accreditation for secure/sensitive systems - Experience in continuous assurance for information security management systems (e.g. NIST, ISO) - Capability to develop and manage a Cyber Incident Response capability - Experience developing Security Awareness training, including Threat Modelling and tabletop war gaming - Experience in maintaining security documentation sets (SyOPS, RMADs, Security Management Plans, ISMS elements, CARBN) - Technology skills in network protection technologies (firewalls, mail gateways) - Understanding of Protective Monitoring systems (SIEM/SOC) - Knowledge of authentication and authorisation technologies (SAML, LDAP, PKI) - Familiarity with encryption, protocols, and penetration tests/IT Health Checks - Excellent verbal and written communication skills - Capable of developing and communicating reports effectively - Good commercial awareness and project discipline