Cyber Security Engineer
Posted 7 days ago by Public Sector Resourcing
Negotiable
Inside
Hybrid
London
Summary: The Ministry of Justice is seeking a Cyber Security Engineer for a 6-month contract, requiring hybrid work with 2-3 days per week in London. The role focuses on integrating security automation into delivery pipelines and conducting security tests on digital services. Candidates must have active SC Clearance and relevant experience in penetration testing and cloud security. The position emphasizes collaboration with developers to enhance secure coding practices and maintain security assurance throughout the software development lifecycle.
Key Responsibilities:
- Perform penetration testing and vulnerability assessments of web applications, APIs, and cloud infrastructure.
- Evaluate the automated security tooling into CI/CD pipelines (SAST, DAST, dependency checking, IaC etc), and make necessary recommendations.
- Collaborate with developers to remediate identified vulnerabilities and ensure secure code practices.
- Provide expert input on cloud security (AWS, Azure, or GCP) and DevSecOps tooling.
- Assist in maintaining security assurance across the SDLC in line with MoJ and NCSC guidelines.
Key Skills:
- An active SC Clearance is an essential requirement for this role.
- Demonstrable experience with penetration testing, ethical hacking, or vulnerability assessments.
- Security testing tools (e.g., Burp Suite, OWASP ZAP, Nikto, Nmap, Metasploit, etc).
- DevSecOps principles and tools (e.g., Veracode, SonarQube, GitHub Advanced Security, IaC scanning, etc.).
- Secure Cloud Infrastructure, specifically AWS and Azure.
- Scripting and automation using Python and Bash.
- Certifications: OSCP or CREST / TIGER Scheme.
- Strong communication skills and the ability to explain security issues to technical and non-technical stakeholders.
Salary (Rate): undetermined
City: London
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: inside IR35
Seniority Level: undetermined
Industry: IT