Cybersecurity Certification Consultant (Contract)
Location: Remote with monthly on-site visits in Derby
Rate: £650 per day (Outside IR35)
Contract Length: Running until end of January (with extension potential)
Clearance Requirement: Active SC clearance is essential
Overview:
We are seeking an experienced Cybersecurity Certification Consultant to support the development of security documentation in line with AMC 20-42, ED-202A, and ED-203A standards. This role focuses on defining and delivering certification-specific artefacts for aviation systems within a highly regulated environment.
Key Responsibilities:
- Author and refine certification documentation in alignment with AMC 20-42, ED-202A, and ED-203A, specifically the following:
o System Security Architecture and Measures (SSAM)
o Preliminary System Security Risk Assessment - Security Case Report (PSSRA SCR)
o Plan for Security Aspects of Certification (PSecAC)
o System Security Scope Definition (SSSD)
- Identify and document the Security Perimeter
- Document system overview, covering all interfaces and trust boundaries in scope of the Security Environment
- Identify Failure Conditions through existing Safety Analysis
- Identify Threat Conditions through cyber security assessment based on identified Failure Conditions
- Identify and document Threat Scenarios
- Perform an asset-based Risk Assessment, including identifying Access Vectors
- Complete Common Criteria Applicability and Traceability mapping
Requirements
Required Experience:
- Active Security Clearance (SC) is mandatory.
- Proven experience with ED-202A and ED-203A standards in an aerospace or highly regulated environment.
- Strong understanding of AMC 20-42 guidance and certification expectations.
- Demonstrated experience delivering security documentation and certification artefacts.
- Knowledge and experience of the Unified Modelling Language.
- Background in systems engineering, cybersecurity V&V, and risk assessment.
- Familiarity with refutation-based analysis techniques is a plus.
Working Conditions:
- Remote-first working arrangement.
- Expected travel: 1 day per month on-site in Derby.
- Start: January