Security by Design Senior Consultant

Security by Design Consultant (SC Cleared)
Defence & Aerospace Programme Yeovil Hybrid

A leading defence and aerospace organisation is seeking an experienced Security by Design Consultant to support the delivery of a major aviation programme. Working within a multidisciplinary engineering environment, you will help ensure products, systems and associated deliverables are secure throughout the full engineering lifecycle.

Key Responsibilities

• Develop and maintain security documentation including security management plans, security cases, assurance artefacts and cyber risk assessments.
• Translate customer security requirements into practical plans, work packages and deliverables.
• Conduct cyber and information security risk assessments, threat modelling and vulnerability analysis.
• Support design reviews, engineering lifecycle activities and security governance forums.
• Identify, manage and escalation security risks and issues.
• Work closely with engineers, architects, developers and programme stakeholders to ensure secure-by-design principles are embedded throughout delivery.
• Support verification, validation and assurance activities.

Required Experience

• Significant experience delivering cyber security within Defence environments.
• Strong understanding of Secure by Design principles and security assurance activities.
• Experience producing security cases, risk assessments and assurance documentation.
• Knowledge of NIST cyber security standards and frameworks.
• Experience working alongside systems engineering, software engineering or product development teams.
• Ability to engage confidently with technical and non-technical stakeholders.

Desirable Experience

• Defence aviation, aerospace or air platform programmes.
• Knowledge of Defence security standards and accreditation processes.
• Supply chain security risk management experience.
• Experience supporting complex engineering lifecycles and formal design reviews.

Essential Requirements

• Active SC Clearance.
• Relevant cyber security qualifications and/or professional certifications.
• Ability to work on-site in Yeovil for a minimum of three days per week.

Contract Details

• Contract until the end of 2027.
• Hybrid working model.
• £120 / hour