Cyber Security Specialist - #2176704

ASA Recruitment’s client, a Public Sector organisation in Edinburgh, is currently looking to recruit 2x Cyber Security Specialists on a hybrid/remote basis, on initial 12-month contracts (with potential extensions) on a rate of c.£550/day Outside of IR35 (based on experience).

The Role:

The successful candidates will work as part of the cyber security team providing advice and guidance to digital transformation projects. Activities will cover cyber security and risk throughout service lifecycle.

Responsibilities:

• Be aware of the current cyber threat landscape and industry best practices and standards.
• Support initial scoping and risk assessment of a change project.
• Interpret security best practice and accreditation requirements to determine security requirements
• Adapt existing cyber security standards and controls to fit specific change projects
• Carry out threat modelling and risk assessments
• Review high and low level designs drafted by solution architects.
• Maintain a security design assessment for new services
• Carry out basic hands on security assessments (e.g. SSL Labs config or CSP evaluator, not including full pen testing)
• Plan and co-ordinate independent pen testing
• Provide recommendations for stage gating and go live decisions
• Own completion and accuracy of all security related product delivery evidence
• Provide recommendations for SecOps processes and automation for new systems
• Security products (email filtering, AV, firewalls, WAFs, MS Defender)
• Security Testing (SAST, DAST)
• Virtualisation platforms and operating systems, including Hyper-V and Windows Server.
• Enterprise Systems (email, PKI, AD, GP, SCCM, Azure, M365)
• Application platforms (MS Dynamics, Power Platform)
• Cloud platforms (Azure)

Essential Experience:

• Security and Risk assessment
• In depth understanding of and experience with enterprise scale digital service provision
• Demonstrable recent record making security contribution during the development of a new digital service
• Ability to work well in an agile project team with internal colleagues and suppliers
• Ability to self-start, accept ownership of work and see through security aspects of project start to finish
• Ability to share knowledge and experience with colleagues and effectively hand over to SecOps
• Ability to make clear, evidence-based, risk-based recommendations to project teams and head of cyber security
• Experience with security of Azure hosted development and applications

Desirable Experience:

• Experience with implementation of AI in business system design
• Experience with security evaluation of enterprise scale network architecture
• Experience with MS Dynamics, Power Platform
• Experience managing independent testing (scope, pre-test config, triage findings)