Cyber Security Specialist

Our client, a leading organisation within the defence and advanced technology sector, is seeking a Product Cyber Security Specialist to support the delivery of secure, mission-critical systems. This role offers the opportunity to work across complex engineering programmes, contributing to the protection and resilience of advanced defence platforms.

The Role
As a Product Cyber Security Specialist, you will provide cyber security expertise across the full systems engineering lifecycle. Working closely with engineering and delivery teams, you will support the identification, assessment and management of cyber risks, ensuring security is embedded throughout product development.

You will also contribute to the ongoing development of product cyber security capabilities, including the use of automation and emerging technologies to enhance assurance processes.

Key Responsibilities

• Support and enhance automation of cyber security risk and vulnerability assessment activities, including the use of advanced technologies
• Provide cyber security expertise across the product systems engineering lifecycle
• Maintain and manage cyber security risk artefacts, ensuring accuracy and consistency
• Provide timely technical guidance to engineering and delivery teams
• Plan cyber security activities and contribute to project estimates and planning
• Support delivery of proportionate and effective cyber security approaches across programmes
• Contribute to the development and continuous improvement of cyber security capability

Essential Requirements

• Degree in Engineering, Computer Science, Cyber Security, or equivalent experience
• Strong background in cyber security and/or engineering environments
• Interest in cyber security within industrial control systems or operational technology
• Experience working with engineering or cyber design data
• Awareness of industrial control systems environments
• Knowledge of cyber security frameworks such as NIST CSF
• Experience in threat modelling using frameworks such as MITRE ATT&CK, DEF3ND or EMB3D
• Experience in cyber security risk management
• Familiarity with vulnerability, patch and update management processes

Desirable Skills

• Understanding of Secure by Design principles aligned to UK MOD standards (e.g. DEFSTAN 05-139, DEFSTAN 05-138)
• Familiarity with ISA/IEC 62443
• Experience or certifications relating to operational technology or industrial control systems

This is an opportunity to join a well-established organisation delivering advanced solutions within the defence sector. The role offers strong potential for professional development and involvement in high-impact, technically challenging programmes.