Cyber Security Specialist

Cyber Security Specialist - PubSec - Outside IR35 - Edinburgh/Hybrid

Market Rates

Duration - 12 months

Harvey Nash's PubSec Client are bringing in a Cyber Security Specialist, you will work as part of a cyber security team, providing advice and guidance to digital transformation projects. Activities will cover cyber security and risk throughout the service lifecycle.

Key Responsibilities

• Be aware of the current cyber threat landscape and industry best practices and standards.
• Support initial scoping and risk assessment of change projects.
• Interpret security best practice and accreditation requirements to determine security requirements.
• Adapt existing cyber security standards and controls to fit specific change projects.
• Carry out threat modelling and risk assessments.
• Review high and low-level designs drafted by solution architects.
• Maintain security design assessments for new services.
• Carry out basic hands-on security assessments (e.g. SSL Labs configuration reviews or CSP evaluation, not including full penetration testing).
• Plan and coordinate independent penetration testing activities.
• Provide recommendations for stage-gating and go-live decisions.
• Own the completion and accuracy of all security-related product delivery evidence.
• Provide recommendations for SecOps processes and automation for new systems.

Technical Scope

• Security products (email filtering, AV, firewalls, WAFs, MS Defender).
• Security testing (SAST, DAST).
• Virtualisation platforms and operating systems, including Hyper-V and Windows Server.
• Enterprise systems (email, PKI, AD, GP, SCCM, Azure, M365).
• Application platforms (MS Dynamics, Power Platform).
• Cloud platforms (Azure).

Skills Required

• Security and risk assessment.
• In-depth understanding of, and experience with, enterprise-scale digital service provision.
• Demonstrable recent experience making a security contribution during the development of a new digital service.
• Ability to work effectively within an agile project team alongside internal stakeholders and third-party suppliers.
• Ability to self-start, take ownership of work, and oversee security aspects from project initiation through to delivery.
• Ability to share knowledge and experience with colleagues and effectively hand over to SecOps teams.
• Ability to make clear, evidence-based, risk-based recommendations to project teams and senior cyber security leadership.
• Experience with the security of Azure-hosted development environments and applications.

Desirable Skills

• Experience with the implementation of AI in business system design.
• Experience with security evaluation of enterprise-scale network architectures.
• Experience with MS Dynamics and Power Platform.
• Experience managing independent testing activities, including scope definition, pre-test configuration, and triage of findings.