Senior Systems Security Engineer

Main Duties:

Responsibilities to Anticipate:

Your day-to-day activities may include:

• Performing Task Lead duties (e.g., task planning, product owner, scrum master);
• Supporting the development of a Security Risk Management Framework (RMF) following the STRIDE model;
• Create suitable Secure by Design (SbD) planning and implementation policies and procedures to ensure all delivered systems are designed, implemented and operated using a SbD approach;
• Developing top-level system security requirements, and flowing down requirements and implementation concepts (SbD);
• Be part of the team who interacts with customers to define / refine requirements, solutions, trades, costs, implementation, system impacts, and effectiveness within an agreed schedule;
• Support developing plans and estimates, task execution, project tracking, reporting, and risk identification and mitigation plans;
• Identify / produce evidence to enable the successful assessment of systems in order to achieve the Authority to Operate (ATO) and allow for through life and end of life security management;
• Involvement in security testing with a view to obtaining ATO;
• Define, implement and or assess security solutions that meet the customer’s requirements and security posture;
• Consult and assist program line management with security architectures, SbD and security risk / problem / issue management;
• Show an understanding of Attack Threat Modelling / Critical Program Information Assessments;
• Understanding of Security Impact Assessment with reference to Change Management;
• Understanding, and compliance with, MoD technology release and export licensing policies;
• Supporting the development of bids and proposals; and,
• An understanding of the Earned Value Management (EVM) project methodology.

Qualifications and Experience Required:

Candidate must exhibit an exceptional degree of ingenuity, creativity and resourcefulness;

• Typically a Bachelor of Science degree (BSc) in Science, Technology, Engineering, or Mathematics (STEM) and 10 years of prior relevant experience, or a Masters Degree (MSc) in a related field and 7 years of prior relevant experience. In absence of a degree, 14 years of relevant experience is required;
• Evidence of experience in the fields of computer technology reverse engineering, or other systems security engineering fields;
• Experience generating Security and/or Cyber Security requirements, design and architecture artifacts, plans, and policies;
• Experience of Information Assurance;
• Technical leadership experience;
• Experience in Systems Engineering, including any of the following:
  • System Requirements definition and analysis;
  • System Test and Analysis;
  • Systems Engineering Studies; and
  • NIST Risk Management Framework (RMF) or STRIDE.
• Experience in systems security including but not limited to various computer hardware and software S/W operating system and application solutions in both a stand-alone and in LAN/WAN configurations and / or Security features and/or vulnerability analysis of various operating systems; and,
• Suitable active and transferable security clearance.

Qualifications We Value:

• Experience in design, development and implementation of secure systems;
• Accreditation / system assessment acceptance following Information Assurance Standards (IAS 1 & 2) and / or SbD;
• Understanding of obsolescence, patch & vulnerability management and change management with reference to Software, firmware, cryptography and hardware;
• Leading System Security Engineering Teams (Cyber);
• Experience in the implementation and business growth of secure systems throughout the entire life cycle of the system;
• Experience in solutions meeting robust systems security requirements;
• Program management experience with systems and security engineering;
• Broad understanding of technology;
• Royal Navy Training experience;
• Strategic planning and proposal writing skills;
• Strong interpersonal skills with the ability to interact positively with coworkers, suppliers, management, and customers in a team environment;
• Experience contributing in a team environment for the purpose of developing creative solutions to technical problems;
• A working knowledge of government IT security environments and requirements including MoD Joint Service Publications, Defence Standards and Conditions; Government Standard 7 (GovS 007: Security), safety and Integrated Logistoics Support (ILS) practices and policies;
• Recognised professional security qualifications such as CISSP, ISSAP, CISM, BCS CITP;
• Member of one or more professional bodies that are relevant to the role, such as, ISACA, ISSA UK, ISC2, CIISec;
• Grounding or qualification in systems architecture, such as MoDAF or Togaf; and,
• Experience of Linux Bash scripting, Python scripting, PowerShell scripting and/or Ansible Playbooks.

RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, color, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.

Privacy Policy and Terms:

Click on this link to read the Policy and Terms: Privacy Policy and Terms