Cyber Security Specialist

Project overview

Cyber Security Specialist - PubSec - Outside IR35 - Edinburgh/Hybrid

Market Rates

Duration - 12 months

Harvey Nash's PubSec Client are bringing in a Cyber Security Specialist, you will work as part of a cyber security team, providing advice and guidance to digital transformation projects. Activities will cover cyber security and risk throughout the service life cycle.

Key Responsibilities

Technical Scope

Skills Required

Desirable Skills

• Be aware of the current cyber threat landscape and industry best practices and standards.
• Support initial scoping and risk assessment of change projects.
• Interpret security best practice and accreditation requirements to determine security requirements.
• Adapt existing cyber security standards and controls to fit specific change projects.
• Carry out threat modelling and risk assessments.
• Review high and low-level designs drafted by solution architects.
• Maintain security design assessments for new services.
• Carry out basic hands-on security assessments (eg SSL Labs configuration reviews or CSP evaluation, not including full penetration testing).
• Plan and coordinate independent penetration testing activities.
• Provide recommendations for stage-gating and go-live decisions.
• Own the completion and accuracy of all security-related product delivery evidence.
• Provide recommendations for SecOps processes and automation for new systems.
• Security products (email filtering, AV, Firewalls, WAFs, MS Defender).
• Security testing (SAST, DAST).
• Virtualisation platforms and operating systems, including Hyper-V and Windows Server.
• Enterprise systems (email, PKI, AD, GP, SCCM, Azure, M365).
• Application platforms (MS Dynamics, Power Platform).
• Cloud platforms (Azure).
• Security and risk assessment.
• In-depth understanding of, and experience with, enterprise-scale digital service provision.
• Demonstrable recent experience making a security contribution during the development of a new digital service.
• Ability to work effectively within an agile project team alongside internal stakeholders and third-party suppliers.
• Ability to self-start, take ownership of work, and oversee security aspects from project initiation through to delivery.
• Ability to share knowledge and experience with colleagues and effectively hand over to SecOps teams.
• Ability to make clear, evidence-based, risk-based recommendations to project teams and senior cyber security leadership.
• Experience with the security of Azure-hosted development environments and applications.
• Experience with the implementation of AI in business system design.
• Experience with security evaluation of enterprise-scale network architectures.
• Experience with MS Dynamics and Power Platform.
• Experience managing independent testing activities, including scope definition, pre-test configuration, and triage of findings.

Project details

• Start: ASAP
• Duration: 12 months
• Location: Edinburgh, Scotland, UK, GB