IT Security Engineer in Farnborough

Location: Farnborough, UK

Security Clearance Level - High - DV Developed Vetting

Leidos has more than 30 years’ experience of developing and running some of the largest government systems in the world. We are currently hiring to expand our UK based technical team who support our delivery for the UK Govt.

As a Cyber Security Architect, you will be able to work with minimal direction on a specific MOD programme. You will ensure that the solution security design meets the customer functional and non-functional security requirements and provides the necessary assurance to our client, highly likely to be backed up by rigorous assurance and certification processes, normally HMG standards (including MOD-specific JSP), NCSC and NIST 800 standards.

You will have responsibility for interfacing to security design partners across the programme, both customer and supplier representatives, and colleagues within our engineering, service, and business development teams. You will ensure that Leidos can establish and maintain an effective and efficient security architecture for the programme, and that the designs will be able to adapt as customer requirements, legislation and assurance standards change over the programme lifespan.

Within the programme, the role will primarily be responsible to a solution architect and Chief Engineer for developing and delivering the relevant elements of the solution, whilst understanding the whole. You will be required to work in both delivery and change proposal environments. You will have a complete understanding of cyber risk and treatment approaches. Based on a strong ability to communicate risk and its proportionate management, you will know how this issue is addressed both in traditional ‘on-premise’ highly sensitive platforms, and in public cloud technologies. You will be experienced and accomplished in meeting the challenges associated with assuring systems in public and private cloud environments. You will be required to develop high- and low-level security architecture designs for systems intended for secure/sensitive environments, with appropriate security based on detailed risk analysis.

Required Skills:

• Proven experience of applying Defence-in-Depth principles and a layered security approach to the design and implementation of secure systems.
• Experience in selecting and implementing proportionate preventive, detective and corrective security controls to manage and reduce risk to acceptable levels.
• Strong understanding of systems engineering governance processes and practical experience across key stages of the Systems Engineering Lifecycle, including requirements management, configuration management, verification and validation.
• Experience working within a variety of delivery methodologies, including Waterfall, Incremental Delivery, SAFe Agile and DevSecOps environments.
• Experience supporting and contributing to key engineering and assurance reviews, including System Requirements Reviews (SRR), Preliminary Design Reviews (PDR), Critical Design Reviews (CDR) and security assurance activities.
• Proven ability to conduct security and architectural trade-off analyses, collaborating with architects, engineers and stakeholders to develop integrated, coherent and secure solutions.
• Understanding of service management principles and experience contributing to security operations, service transition and operational security management planning.
• Experience operating within both programme delivery and business development/bid environments, including supporting solution development, risk assessments and technical proposals.
• Experience working with Defence Digital, Defence standards, and MOD security policies, architectures and assurance approaches.
• Experience engaging with customers, suppliers and accrediting authorities to support security assurance, risk management and system accreditation activities.
• Understanding of security governance, risk management and compliance activities within highly regulated government and defence environments.

Technology skills/Experience:

• Extensive experience designing, implementing and assuring secure solutions within Amazon Web Services (AWS) environments, including the use of AWS native security services, cloud security best practices, and secure-by-design principles.
• Extensive experience designing and assuring secure virtualised solutions within VMware environments, including the application of security controls to protect infrastructure, workloads and management platforms.
• Experience of designing, accrediting and securing solutions hosted within MODCloud environments, particularly MODCloud ICE, including an understanding of Defence cloud hosting patterns and assurance requirements.
• Experience of security infrastructure in public and private cloud environments, including virtual networking, identity and access management, encryption, logging and monitoring, and hybrid IaaS/PaaS/SaaS architectures.
• Experience of achieving and maintaining security accreditation and assurance for systems operating in Defence, Government, or other highly regulated environments.
• Excellent understanding of Confidentiality, Integrity and Availability (CIA) and practical experience in applying these principles.
• Experience in defining derived security requirements for a system and managing traceability.
• Experience in producing security assurance documentation sets (such as SyOPS, Security Management Plan, ISMS, and documentation to support DART submissions).
• Experience of network and boundary protection technologies (firewalls, mail gateways, load balancers, anti-virus), including cross-domain technologies.
• Experience of authentication and authorisation technologies (SAML, LDAP, PKI, etc.).
• Understanding of MOD ISN 23/09 Secure by Design.
• Understanding of the implementation, operation and maintenance of SIEM products.
• Relevant cloud and security certifications such as AWS Solutions Architect, AWS Security Specialty, CISSP, SABSA, CCSK, or equivalent qualifications would be advantageous.

Communication and Soft Skills:

• Excellent verbal and written communication skills and works well in a team environment.
• Capable of developing and communicating a vision to meet the System Requirements.
• Ability to communicate complex technical ideas across a wide range of different audiences.
• A good level of commercial awareness that will support the bid and delivery environments.

Clearance Requirements:

This role will require Developed Vetting (DV) Security Clearance. Those candidates without DV must be suitable for the process and will be required to commence application immediately upon successful application.

Commitment to Diversity:

We welcome applications from every part of the community and are committed to a truly diverse and inclusive culture. We foster a sense of belonging, welcoming all perspectives and contributions, and providing equal access to opportunities and resources for everyone.