Cyber Security Engineer
// Role Summary
Join BAE Systems as a Cyber Security Engineer – Risk & Assurance in Christchurch, playing a vital role in delivering advanced defence solutions. You'll work closely with stakeholders to understand cyber risks, propose secure architectures, and implement controls throughout the project lifecycle.
// Key Responsibilities
- Understand cyber security risk context and provide value-driven risk reduction.
- Propose architectures, develop secure designs, and implement security controls.
- Produce clear and concise technical documentation.
- Identify cyber security risks and achieve assurance/accreditation at high classifications.
- Ensure compliance with NIST frameworks and participate in penetration tests.
- Experience with MOD policy (JSP440) and NCSC guidance required.
// Role Specification
Join BAE Systems and become part of a team that pioneers progress and protects what matters most. As a Cyber Security Engineer – Risk & Assurance, you will be instrumental in delivering advanced, technology-led defence, aerospace, and security solutions.
Core Duties:
- Help projects understand the cyber security risk context.
- Work closely with stakeholders to identify and propose architectures, develop secure designs, and identify and implement security controls which provide value-driven risk reduction.
- Produce clear and concise technical documentation.
- Occasional travel to customer sites to support meetings and investigations.
- Identify cyber security risks and the commensurate controls, achieving assurance / accreditation at the highest classifications and within the UK defence domain.
- Understand the current trends and developments in cyber security.
- Ensure compliance with the NIST Risk Management Framework and NIST Cyber Security Framework or similar frameworks and be responsible for planning or participating in CHECK/penetration tests.
Essential Skills:
- Experience of MOD policy in JSP440 and knowledge of NCSC guidance.
- Experience of working on MoD Secure by Design (SbD) projects.
- Knowledge in one or more security processes – such as security risk assessment, risk treatment using security control baselines, etc.
- Experience in applying security architecture principles to small or large integration projects.
The Cyber Security Team supports a fully integrated command and control system for the MoD, a dynamic systems & software programme run from our Christchurch site.
Please be aware that many roles at BAE Systems are subject to security and export control restrictions. As a minimum, all applicants must achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting.