Lead System Security Engineer

The Lead Systems Security Engineer is a critical role within the National Security Cyber (NSC) mission area of the Cyber & Intelligence business unit. This role supports the business in a constructive way, always offering the required assurances to both business and customer whilst providing innovative solutions to risk-based problems. Main Duties: You will be responsible for ensuring programme information assets are protected through policy, procedural and technical enhancements. You will be comfortable working in a matrix management organisation, you will act as the trusted advisor to the programme by ensuring industry best practice and customer security requirements are implemented with regards to IA, cyber security and security risk management. You will be able to lead small consultancy engagements based on clear direction and provide an evidential report to summarise your findings. Definitions: Information Assurance (IA) are measures that protect and defend information and information systems by ensuring their confidentiality, integrity, availability, authentication, and non-repudiation. These measures include providing for restoration of information systems by incorporating protection, detection, and reaction capabilities. It aims to reduce the risk of cyber attacks and protect against the unauthorised exploitation of systems, networks, and technologies. Cyber Security is the application of technologies, processes, and controls to protect systems, networks, programs, devices and data from cyber attacks. Systems Security Engineering (SSE) is a specialty engineering field strongly related to systems engineering. It applies scientific, engineering, and IA principles to deliver trustworthy systems that satisfy stakeholder requirements within their established risk tolerance.

Essential:

• Forward facing (used to talking to/chairing meetings with customers at a senior level)
• Understanding of formulating, recording and managing risk
• Understands security requirements and how to decompose them
• Knowledge of Information Assurance (IA) processes and procedures
• Understanding/experience of Secure by Design
• Understanding/experience of waterfall and agile methodologies
• Understanding how obsolescence impacts Information Assurance
• Supporting the development of Risk Management Framework documents and controls
• Ability to travel (UK based).
Desirable:
• Worked with MOD or other similar agencies
• Experience/understanding of Cryptography including processes and procedures
• Experience of assessment of systems in a non-standard environment
• Experience of being on a Bid team
• Understanding of simulated environments (eg actual vs dummy datasets)
• Working knowledge of ISO 27001 or equivalent standards
• Working knowledge of NIST Risk Management Framework
• Hold a current professional Information Security certification or qualification (e.g. CISSP, CISM, CRISC, BCS CITP)
• DV clearance, or the willingness and ability to become DV cleared
• Ability to work within a fast-paced environment
• Demonstrable knowledge of HMG Security Policy Framework, ISO 27001 and NIST Risk Management Framework.
  
  With facilities in Broughton, Waddington, Glenrothes, Harlow, Gloucester, and Manchester, with a presence across other customer sites also. Raytheon UK is invested in the British workforce and the development of UK technology. Across the country Raytheon UK employs 1,700 people and supports 8,000 jobs. As a prime contractor and major supplier to the U.K. Ministry of Defence, Raytheon continues to invest in research and development, supporting innovation and technological advances across its core mission areas Weapons & Sensors, and Cyber, & Intelligence.
Raytheon UK is a landed company, part of the Raytheon Technologies organisation and sits within the Raytheon Intelligence & Space business. About Raytheon Technologies: Raytheon Technologies Corporation is an aerospace and defence company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises four industry-leading businesses - Collins Aerospace Systems, Pratt & Whitney, Raytheon Intelligence & Space and Raytheon Missiles & Defence. Its 195,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cyber security. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Waltham, Massachusetts.