Cyber Security Specialist - PubSec - Outside IR35 - Edinburgh/Hybrid

Market Rates

Duration - 12 months

Harvey Nash's PubSec Client are bringing in a Cyber Security Specialist, you will work as part of a cyber security team, providing advice and guidance to digital transformation projects. Activities will cover cyber security and risk throughout the service lifecycle.

Key Responsibilities

  • Be aware of the current cyber threat landscape and industry best practices and standards.
  • Support initial scoping and risk assessment of change projects.
  • Interpret security best practice and accreditation requirements to determine security requirements.
  • Adapt existing cyber security standards and controls to fit specific change projects.
  • Carry out threat modelling and risk assessments.
  • Review high and low-level designs drafted by solution architects.
  • Maintain security design assessments for new services.
  • Carry out basic hands-on security assessments (e.g. SSL Labs configuration reviews or CSP evaluation, not including full penetration testing).
  • Plan and coordinate independent penetration testing activities.
  • Provide recommendations for stage-gating and go-live decisions.
  • Own the completion and accuracy of all security-related product delivery evidence.
  • Provide recommendations for SecOps processes and automation for new systems.

Technical Scope

  • Security products (email filtering, AV, firewalls, WAFs, MS Defender).
  • Security testing (SAST, DAST).
  • Virtualisation platforms and operating systems, including Hyper-V and Windows Server.
  • Enterprise systems (email, PKI, AD, GP, SCCM, Azure, M365).
  • Application platforms (MS Dynamics, Power Platform).
  • Cloud platforms (Azure).

Skills Required

  • Security and risk assessment.
  • In-depth understanding of, and experience with, enterprise-scale digital service provision.
  • Demonstrable recent experience making a security contribution during the development of a new digital service.
  • Ability to work effectively within an agile project team alongside internal stakeholders and third-party suppliers.
  • Ability to self-start, take ownership of work, and oversee security aspects from project initiation through to delivery.
  • Ability to share knowledge and experience with colleagues and effectively hand over to SecOps teams.
  • Ability to make clear, evidence-based, risk-based recommendations to project teams and senior cyber security leadership.
  • Experience with the security of Azure-hosted development environments and applications.

Desirable Skills

  • Experience with the implementation of AI in business system design.
  • Experience with security evaluation of enterprise-scale network architectures.
  • Experience with MS Dynamics and Power Platform.
  • Experience managing independent testing activities, including scope definition, pre-test configuration, and triage of findings.

Apply