Senior Cyber Security Engineer 6

h3Qualifications /h3 ul li3+ years practical experience developing or delivering services in Cybersecurity /li liExtensive practical experience identifying vulnerabilities and potential security threats /li liDevelopment of technical requirements, system diagrams and other engineering products to aid Cybersecurity acquisition and procurement /li liProven ability to deliver cyber security capabilities for industry, government, or military /li liUp-to-date knowledge and experience in the following areas: ul liDesign and implementation of cyber security capabilities and supporting infrastructure elements in an operational environment /li liCryptographic technologies including key management /li liIdentity and access management /li /ul /li liKnowledge in the following areas: ul liNetwork monitoring and detection technologies /li liThe design of cyber security capabilities on cloud infrastructure /li liAbility to apply architecture methodologies to express complex, systems of systems in architectural terms and models of varying detail /li liRecognised track record in dealing with stakeholders, understanding their needs, problems, and requests and proposing constructive ways ahead /li liProactive attitude in seeking and maintaining trust from stakeholders /li liProven ability to communicate effectively orally and in writing with good briefing skills /li liExperience leading small teams /li /ul /li liProficient at using the ArchiMate modelling language /li liRelevant certifications in cyber security, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or GIAC Security /li /ul h3Desirable Qualifications/Experience /h3 ul liExperience in working for or supporting a military or governmental organization /li liBachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience /li liOr exceptionally, the lack of a university degree may be compensated by the demonstration of a candidates particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work /li /ul h3DUTIES/ROLE /h3 ul liSolution architecture: ul liContributes to the development of solution architectures in specific business, infrastructure or functional areas /li liIdentifies and evaluates alternative architectures and the trade-offs in cost, performance and scalability /li liDetermines and documents architecturally significant decisions /li liProduces specifications of cloud-based or on-premises components, tiers and interfaces, for translation into detailed designs using selected services and products /li liSupports projects or change initiatives through the preparation of technical plans and application of design principles /li liAligns solutions with enterprise and solution architecture standards (including security) /li liProvides guidance on the application and operation of elementary physical, procedural and technical security controls /li liExplains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems /li liIdentifies risks that arise from potential technical solution architectures /li liDesigns alternate solutions or countermeasures and ensures they mitigate identified risks /li liInvestigates suspected attacks and supports security incident management /li /ul /li liRequirements definition and management: ul liDefines and manages scoping, requirements definition and prioritisation activities for initiatives of medium size and complexity /li liContributes to selecting the requirements approach /li liFacilitates input from stakeholders, provides constructive challenge and enables effective prioritisation of requirements /li liEstablishes requirements baselines, obtains formal agreement to requirements, and ensures traceability to source /li /ul /li liUser experience analysis: ul liSelects appropriate techniques and tools to develop user stories and elicit user experience requirements in complex situations /li liIdentifies and describes the design goals for systems, products, services and devices /li liIdentifies the roles of affected stakeholder groups /li liSpecifies measurable criteria for the required usability and accessibility of systems, products, services and devices /li /ul /li liProject implementation

responsibilities:
ul liProvides cyber security technical and professional input and technical leadership to engineering projects. These contributions will include, but are not limited to, statement of work preparation, execution planning, cyber items procurement, cyber security delivery effort coordination between assigned hands-on engineers within NCIA and NCSC by following multi-layer change management framework, problems identification and resolution, internal and external to NCSC quality control management, contribut