Technical Security Engineers, Various Sites, 12 Months

• Develop and maintain project security documentation, including risk management and security classification plans
• Lead consultation with Defence security stakeholders to achieve Authority to Operate (ATO) and continuous ATO (cATO)
• Perform security risk assessments, vulnerability analysis, and compliance checks
• Provide technical security guidance across the platform, application, and network layers
• Define and assess security controls, ensuring alignment with ISM, PSPF, and Defence policies
• Support integration of secure design principles into pipelines and software delivery
• Act as security lead in DevSecOps activities and application onboarding

• Solid background in Security Engineering or related discipline
• Experience designing, documenting, and reviewing secure systems and infrastructure
• Strong background in security assessments, risk mitigation, and accreditation support (e.g., IRAP, ATO)
• Proficiency with vulnerability scanning tools (e.g., SD Elements) and secure pipeline practices
• Ability to interpret high-level policies and integrate them into secure technical implementations

• Previous experience in Defence or high-security environments
• Familiarity with containerised deployments, IaC, and secure cloud environments
• Deep understanding of cATO frameworks and continuous monitoring approaches

Infopeople