Cyber Security Engineer - Defence

Cyberfort
Liverpool
1 month ago
Applications closed

Related Jobs

View all jobs

Systems Engineer

Senior System Engineer (Software)

▷ Urgent Search! CHIEF INFORMATION SECURITYOFFICER-AEROSPACE AND DEFENSE:

IT Systems Technician

Project Lead System Engineer

Project Lead System Engineer

Job Title:

Cyber Security Engineer

Reporting to:

Head of Defence and Aerospace Consultancy

Location:

Remote with travel to customer site (Feltham)

Role Requirements:

  • Must hold a current government security vetting at SC level OR Be eligible to obtain such clearance.
  • Must be currently resident in the UK
  • Must have resided in the UK for the last 5 years consecutively.

Desirable

  • Previous experience within defence.
  • Delivering Security within agile projects

Reward Package:

  • Salary Package - £65,000 - £85,000 DOE
  • 25 days annual holiday + Birthday off in addition and option to buy/sell additional 5 days
  • Company Pension Scheme
  • Private medical Cover
  • Life Assurance
  • Extensive non-taxable benefits

THE ROLE

This is an exciting opportunity to join our world class Consultancy arm, as a Senior/Lead Cyber Security Risk Consultant, supporting the next phase of Cyberfort’s growth. You’ll be joining a culture of knowledge sharing and continuous learning with expert peers in Secure Architecture and Risk planning. We work across a number of sectors with a diverse client base. We aim to create an environment where everyone can reach their full potential. We work together, we are passionate, creative, and we embrace difference.

In this role you’ll work within our Consulting team, supporting new and existing clients across various sectors to define and implement security risk assessment and best practice solutions that match their requirements. You’ll work in close partnership with clients to ensure the delivery of expert services by complementing their inhouse Information and Cyber Security resources combining expertise in information security, solution architecture and business advice.


As a Security Consultant, you will be involved in a variety of work which may include responsibility for leading, advising and implementing risk management frameworks, Information Security Management Systems, Enterprise Security Risk Management (2nd line assurance), 1st line identification of risks relating to Security Architecture, maintaining an awareness of published vulnerabilities and best practices across various platforms, especially cloud infrastructures, leading and delivering security assurance coordinator activities, providing Security & Information Risk Advice. Working across the business and multiple technology platforms, you will play a key role in ensuring our clients make the best use of their existing technology and make proportionate, risk-informed decisions, ensuring protection of client assets and transformation of their security architecture.


This role forms part of the wider Consultancy team and will work cross functionally with the Delivery Managers and others to support and assure project delivery through all phases of the agile workflow. As a team we’re always looking to raise the bar, learn new things and incorporate new technologies and you will too! You’ll share your knowledge with the team and the wider Cyberfort community, contributing to Group blogs and undertaking research related to technology enhancements.


Responsibilities:

General Responsibilities:


Vulnerability Scanning & Reporting

Perform regular vulnerability scans and generate reports utilising the below tool sets. The process should be focused on ensuring that the below tool sets are kept up to date and ensure that scans are performed regularly to help assist the Vulnerability and Patch Manager with identifying weaknesses in the system.

  • SonarQube: perform regular scans with SonarQube to audit code quality metrics, potential bugs, and security vulnerabilities.
  • Trivvy:perform regular scans with Trivvy to identify vulnerabilities within containers.
  • Nessus:perform regular Nessus scans and ensure that the warehouse and plugins are kept up to date to capture new vulnerabilities.
  • Reporting:assist the Vulnerability and Patch Manager withgenerating regular vulnerability management reports, which are to be provided to the P-ASG cyber security and IA lead.


Endpoint Security

  • Trellix:perform regular updates to Trellix to ensure the latest packages are applied and policies are amended to keep up to date with new and emerging threats.
  • Antivirus and Anti-malware Protection:perform compliance checks to ensure that antivirus and anti-malware protection is deployed successfully and being kept up to date by the relevant team.
  • Firewalls:perform compliance checks and regular audits of Firewall rules to ensure that unauthorised access and threats are being blocked.
  • Access Control:ensuring that access controls have been implemented correctly to only allow authorised users to gain access to certain data and systems.


Incident Management & Tickets

  • Incident Identification:help to recognise and confirm potential incidents through alerts, logs and user reports. This includes distinguishing between true threats and false positives.
  • Incident Response:respond to potential security breaches or cyber-attacks. The main effort should focus on containment, mitigating the damage, investigation of the root cause of the incident and restoring to normal operations.
  • Ticket Requests:respond to and resolve any tickets raised to the Leidos Security group on SD+ that require Cyber Security Engineering input.


System Hardening

  • Patch Updates to Security Products:ensure that the following security tool sets are kept up to date with regular security patches and software updates to fix vulnerabilities and improve system security:
  • Trellix
  • Bolden James
  • Nessus
  • SonarQube
  • Trivvy
  • System Compliance:perform regular system compliance audits and updates to ensure that the systems are compliant with industry best practices. This includes CIS, STIG, NIST etc.
  • Security Enforcing Group Policy Objects (GPOs):perform regular reviews and updates to security enforcing GPOs to ensure that they are compliant and fit for purpose.
  • Vulnerability Assessments:conduct periodic assessments to identify and address potential vulnerabilities.


Change Work

  • Security Impact Triage Tool (SITT):if a SITT is required for new software or hardware then it is the responsibility of the Cyber Security Engineer to fill outSection 2of the SITT tool.
  • Security Evaluation, Testing and Assurance (ST&V):perform Security, Evaluation, Testing and Assurance activities for any new changes that are planned in as part of PI Planning.


Participation in Regular Meetings

Cyber Security Engineers are expected to lead or attend numerous meetings that require their input. This includes the following:

  • Security Working Group (SWG):Lead Cyber Security Engineer to attend.
  • Vulnerability Triage:Lead Cyber Security Engineer to manage and other Cyber Security Engineers to attend.
  • Security Workshop:All Cyber Security Engineers to attend.
  • PI Planning:Change Cyber Security Engineers to participate and attend.
  • Daily Standups (Blue/Green Team):Change Cyber Security Engineers to attend every day.


Documentation

Cyber Security Engineers are responsible for creating, maintaining and reviewing detailed documentation. This includes High-Level & Low-Level Designs (HLD/LLD), Standard Operating Procedures (SOP) and compliance reports.

To be Great at the role:

  • Be customer focused and a strong verbal and written communicator.
  • Possess strong hands-on experience in reviewing project delivery plans relating to security systems; evaluation of network and security technologies; developing requirements for network and cloud security designs as well as hardware & software, able to implement cyber security and risk management frameworks, deliver cyber risk assessment in line with established risk methodologies, providing Security & Information Risk Advice.
  • Have experience building and implementing secure by design principals within the software development lifecycle (SDLC).
  • Possess awareness and understanding of HMG and NCSC Security policies, standards and guidance, alongside MOD Joint Service Publications i.e. JSP440 and JSP604
  • Passionate in cyber security.
  • Motivated, self-directed and able to work in large and virtual teams.


Our Purpose:


The Cyberfort Group is a community of 180+ passionate people united by one overall mission... to make the world safer, one business at a time. We are the "one-stop shop" for all things cyber and are working to build a centre of excellence for our customers by building an amazing place to work, learn and develop for our people.


We work with a diverse range of clients, including large Governmental departments as well as other public sector organisations and businesses within the private sector. We're growing our business and our team through our continuous investment in developing technology and cyber capability; we aim to deliver innovation to our customers as fast as possible. Whether it's AI-driven ML-based threat intelligence or rapid start hybrid Cloud; our goal is to implement solutions that make us stand out in the market.


If that sounds like you, we'd like to see......

  • Your CV


Find your place at the Cyberfort Group -Our vision is to bring together technology, people, expertise, facilities and leaders in Cybersecurity to create capability that is second to none. We aim to create a workplace that leverages the expertise of people from a diverse range of backgrounds that are to be themselves, are celebrated for thinking differently and work together as one team.

We know that a one size fits all approach to our recruitment and selection practices will not allow us to reach some of the incredible people that are out there and it’s common practice for us to make adjustments. When you apply to work for us please let us know if there’s anything we can do to allow you to showcase your skills and talents to the best of your ability.

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Contract vs Permanent Space Jobs: Which Pays Better in 2025?

From small satellite launches to deep‑space exploration, the UK space industry is soaring to new heights. Innovations in rocket propulsion, Earth observation, satellite communications, and space debris management have created a thriving job market—ranging from satellite engineers and mission analysts to business development leads and regulatory experts. Yet, with so many emerging roles, professionals often wonder which type of employment—day‑rate contracting, fixed-term (FTC), or permanent positions—delivers the best pay and most favourable career conditions. In this blog post, we delve into the pros, cons, and earning potential of each employment format. We also provide sample take‑home pay scenarios to illustrate how annual income can differ when working as a self‑employed contractor vs. on an FTC or in a permanent role. If you are contemplating your next move in this exciting sector, read on to discover the key factors that will help you determine whether contract or permanent space jobs are more lucrative in 2025—and how each path aligns with your long‑term career goals.

Thales Alenia Space Jobs in 2025: Your Complete UK Guide to Building Europe’s Next‑Generation Satellites & Lunar Gateways

From pressurised modules orbiting the Moon to broadband mega‑constellations 1,200 km above Earth, Thales Alenia Space (TAS) sits at the heart of Europe’s space ambitions. A joint venture between Thales (67 %) and Leonardo (33 %), TAS employs more than 8,500 people across 17 sites—with growing hubs in Bristol and the Harwell Space Cluster. The firm is lead contractor for Europe’s IRIS² secure‑connect constellation (green‑lit in 2024) and supplies modules for NASA/ESA’s Lunar Gateway. Unsurprisingly, TAS has ramped up hiring: a quick scan of the Thales Alenia Space careers portal shows vacancies in systems engineering, RF payloads, AIT and mission operations. Whether you are a UK graduate dreaming of building communications payloads, a thermal engineer keen to keep lunar habitats at room temperature, or a programme manager itching to deliver the next Copernicus Earth‑observation satellite, this guide explains how to land a Thales Alenia Space job in 2025.

Satellite Engineering vs. Launch Vehicle Engineering vs. Ground Systems: Which Path Should You Choose?

The space sector has experienced a remarkable resurgence in recent years, fuelled by commercial enterprises, miniaturised satellites, reusable rockets, and interplanetary missions. From building satellites that gather climate data to launching payloads on low-cost rockets or orchestrating ground infrastructure for real-time mission control, this industry spans a vast array of engineering and scientific disciplines. If you’ve been browsing space jobs on www.ukspacejobs.co.uk, you’ll likely notice a variety of roles falling into Satellite Engineering, Launch Vehicle Engineering, or Ground Systems. Which path should you pursue if you’re passionate about shaping humanity’s presence beyond Earth? In this comprehensive guide, we’ll define these three primary fields, compare overlapping vs. unique skills, delve into job titles and salary ranges, share real-world examples, and offer career tips. Whether your fascination lies in designing high-performance rockets, creating satellite constellations for broadband coverage, or ensuring seamless ground-to-space communication, understanding these subfields will help you align your talents and ambitions with the right trajectory—both literally and figuratively.