Security by Design Consultant
Location: Yeovil, Somerset, 40% onsite
Contract: 60 working days delivered between November 2026 and 31 March 2027
Clearance: Active UK MOD SC clearance required
We are seeking an experienced Security by Design Consultant to support a major defence aviation programme preparing for the commissioning of an Integrated Logistics Support service.
This is a deliverables-focused engagement requiring approximately 60 working days across the contract period, rather than a full-time assignment. The successful consultant will take ownership of producing a detailed Security Management Plan, identifying critical security gaps and defining a sequenced remediation plan.
Key Responsibilities
- Produce a comprehensive Security Management Plan covering the programme's systems, services, assets and security perimeter.
- Identify critical and high-priority security gaps affecting service delivery.
- Develop a high-level remediation plan covering ownership, timescales, cost and complexity.
- Define system dependencies, external connections and codes of connection.
- Support security governance and risk management across the service lifecycle.
- Build relationships with programme, customer and security stakeholders.
- Transfer security knowledge across the wider programme team.
Essential Experience
- Minimum seven years' experience delivering cyber security outcomes within a UK defence environment.
- Proven experience producing detailed Security Management Plans.
- Strong knowledge of MOD accreditation, assurance and Secure by Design, including ISN 2023/09.
- Experience applying Defence Standard 05-138 Issue 4.
- Knowledge of DEFCON 658, ideally including the latest update.
- Working knowledge of NIST SP 800-30, SP 800-37 and SP 800-53.
- Experience of security governance and risk management within a defence aviation or defence supplier environment.
- Technical understanding of enterprise IT, application security and system security design.
- Ability to operate independently and deliver against a defined Statement of Work.
- Active UK MOD SC clearance.
Qualifications
A degree or master's degree in cyber security, systems engineering, software engineering or equivalent professional experience is preferred.
Candidates should also hold at least one recognised cyber security qualification, such as:
CISSP
CISM
CASP+ / SecurityX
Chartered Cyber Security Professional, or equivalent
The role requires approximately 40% attendance in Yeovil, alongside at least weekly programme stand-ups.