Security Consultant — Defence Cyber Assurance & Security

Overview

Whiteflare is seeking an experienced security professional to support Project NJORD within the Air Defence & Maritime Radars Delivery Team. The project is addressing the effects of offshore wind farms on UK Air Defence Radar capability.

Embedded within a multidisciplinary MOD delivery team, you will bring together cyber assurance, project security and security engineering to support design reviews, approvals, acceptance and transition into service. This is a delivery-focused opportunity to provide independent, evidence-based advice and constructive challenge across a complex Defence programme.

Specific job skills

You will coordinate the integrated security workstream, maintaining a security management plan, assurance schedule and prioritised actions aligned with project milestones. You will develop and assure the Project Security Case, maintain traceable risk evidence and apply Secure by Design principles, including threat and vulnerability analysis and continual assurance planning.

The role involves reviewing supplier architectures, requirements, designs and test evidence; identifying assurance gaps; and securing clear corrective actions. You will also advise on classification, information handling, supply-chain security and cryptographic considerations, support Security Working Groups, and prepare assurance submissions and briefings for approvals and operation up to UK SECRET.

Essential skills and experience

• Security Profession experience in at least two of cyber assurance, project security and security engineering, with the ability to integrate all three.
• Experience developing or assuring security cases, risk assessments and supporting evidence for complex Defence, government or similarly regulated systems.
• Practical knowledge of Secure by Design, cyber risk management, threat and vulnerability assessment, security controls and continual assurance across the acquisition lifecycle.
• Ability to challenge technical and supplier evidence constructively and turn findings into clear, owned and time-bound actions.
• Strong communication and stakeholder engagement skills, including concise governance papers, assurance arguments and senior stakeholder briefings.

Desired skills and experience

• MOD or DE&S acquisition experience, including GEAR/CADMID governance, DART and Defence security policy and standards.
• Experience with operational technology, radar, command-and-control, safety-related or other mission-critical systems.
• Relevant professional registration or security qualifications, such as Chartered status, CISSP, CISM, CCP or equivalent.
• Experience in supply-chain assurance, protective security, cryptographic planning, penetration-test evidence and transition into service.

Eligibility Checks

Candidates must be SC cleared UK nationals.

Please note: We cannot accept any applications from candidates currently working on the Aurora framework unless the contract is due to finish within the next month.