Senior Cyber Security Engineer 6

h3Duties /h3 ulliContributes to the development of solution architectures in specific business, infrastructure or functional areas. /liliIdentifies and evaluates alternative architectures and the trade-offs in cost, performance and scalability. /liliDetermines and documents architecturally significant decisions. /liliProduces specifications of cloud-based or on-premises components, tiers and interfaces, for translation into detailed designs using selected services and products. /liliSupports projects or change initiatives through the preparation of technical plans and application of design principles. /liliAligns solutions with enterprise and solution architecture standards (including security). /liliProvides guidance on the application and operation of elementary physical, procedural and technical security controls. /liliExplains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems. /liliIdentifies risks that arise from potential technical solution architectures. /liliDesigns alternate solutions or countermeasures and ensures they mitigate identified risks. /liliInvestigates suspected attacks and supports security incident management. /liliDefines and manages scoping, requirements definition and prioritisation activities for initiatives of medium size and complexity. /liliContributes to selecting the requirements approach. /liliFacilitates input from stakeholders, provides constructive challenge and enables effective prioritisation of requirements. /liliEstablishes requirements baselines, obtains formal agreement to requirements, and ensures traceability to source. /liliSelects appropriate techniques and tools to develop user stories and elicit user experience requirements in complex situations. /liliIdentifies and describes the design goals for systems, products, services and devices. /liliIdentifies the roles of affected stakeholder groups. /liliResolves potential conflicts between differing user requirements. /liliSpecifies measurable criteria for the required usability and accessibility of systems, products, services and devices. /liliProvides cyber security technical and professional input and technical leadership to engineering projects. /liliProvides technical input and support to acquisition projects including, but not limited to, writing and reviewing / coordinating cyber security requirements (statement of work, system design specification, high and low level design blueprints, bill of material), supporting procurement process (providing answers to raised questions); evaluating bids; /liliDevelops and presents cyber security scientific, engineering, technical, and marketing information suitable for official meetings. /liliRepresents the NCIA/ NCSC in working groups and forums. /liliExecutes tasks assigned by Branch, NCSC Service Delivery Managers and Resource manager. /li /ul h3Requirement /h3 ulliAt least 3 years practical experience developing or delivering services in Cybersecurity. /liliExtensive practical experience identifying vulnerabilities and potential security threats. /liliDevelopment of technical requirements, system diagrams and other engineering products to aid Cybersecurity acquisition and procurement. /liliProven ability to deliver cyber security capabilities for industry, government, or military. /liliDesign and implementation of cyber security capabilities and supporting infrastructure elements in an operational environment; /liliCryptographic technologies including key management; /liliIdentity and access management; /liliRisk management. /liliNetwork monitoring and detection technologies; /liliThe design of cyber security capabilities on cloud infrastructure. /liliAbility to apply architecture methodologies to express complex, systems of systems in architectural terms and models of varying detail; Recognised track record in dealing with stakeholders, understanding their needs, problems, and requests and proposing constructive ways ahead. /liliExperience leading small teams. /liliLanguage proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency". /liliRelevant certifications in cyber security, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or GIAC Security. /liliA minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience. /liliOr exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work. /li /ul h3Preferences /h3 ulliExperience in working for or supporting a military or governmental organization. /li /ul