Security Engineer - Assurance/Reporting
Security Engineer – Assurance/Report Writing
We’re looking for a Security Assurance Engineer with the ability to see the whole security picture—technology, people, and process. You’ll join a team of experienced cyber specialists, but your role is to step back from the individual technical outputs and assess what they mean for the overall security posture of the service.
- Review and analyse security artefacts, test results, assessments, and technical outputs from the cyber teams.
- Translate that information into clear, evidence-based Security Assurance Reports.
- Develop, maintain, and communicate security arguments that demonstrate how risks are mitigated and how the service meets required security outcomes.
- Look beyond technical controls and assess people, process, and governance aspects that contribute to end-to-end security.
- Provide a holistic view of how all elements—technical and non-technical—impact the security of implemented services.
- Engage with stakeholders across engineering, delivery, and governance to ensure security assurance is understood and integrated.
Required Skill and Experience:
- SC Clearance is essential and must have been active within the last 12 months.
- Experience producing structured security assurance documentation, security cases, or security arguments (e.g., using GSN, safety/security case approaches, or similar).
- The ability to interpret diverse security inputs—pen test results, architectural designs, risk assessments, compliance outputs—and turn them into coherent assurance narratives.
- A strong understanding of how organisational processes, behaviours, and controls influence security.
- Excellent written communication skills, with the ability to present complex security information clearly and persuasively.
- Experience in large or complex projects where security needed to be managed holistically (not just at a technical-control level).
- Knowledge of relevant security standards or frameworks (e.g., NCSC, ISO 27001, NIST, etc.) is a plus.