Cybersecurity Configuration Consultant - Contract

Cybersecurity Certification Consultant (Contract)

Location: Remote with monthly on-site visits in Derby

Rate: £650 per day (Outside IR35)

Contract Length: Running until end of January (with extension potential)

Clearance Requirement: Active SC clearance is essential

Overview

We are seeking an experienced Cybersecurity Certification Consultant to support the development of security documentation in line with AMC 20-42, ED-202A, and ED-203A standards. This role focuses on defining and delivering certification-specific artefacts for aviation systems within a highly regulated environment.

Key Responsibilities

• Author and refine certification documentation in alignment with AMC 20-42, ED-202A, and ED-203A, specifically the following:
  1. System Security Architecture and Measures (SSAM)
  2. Preliminary System Security Risk Assessment - Security Case Report (PSSRA SCR)
  3. Plan for Security Aspects of Certification (PSecAC)
  4. System Security Scope Definition (SSSD)
• Identify and document the Security Perimeter
• Document system overview, covering all interfaces and trust boundaries in scope of the Security Environment
• Identify Failure Conditions through existing Safety Analysis
• Identify Threat Conditions through cyber security assessment based on identified Failure Conditions
• Identify and document Threat Scenarios
• Perform an asset-based Risk Assessment, including identifying Access Vectors
• Complete Common Criteria Applicability and Traceability mapping

Required Experience

• Active Security Clearance (SC) is mandatory.
• Proven experience with ED-202A and ED-203A standards in an aerospace or highly regulated environment.
• Strong understanding of AMC 20-42 guidance and certification expectations.
• Demonstrated experience delivering security documentation and certification artefacts.
• Knowledge and experience of the Unified Modelling Language.
• Background in systems engineering, cybersecurity V&E, and risk assessment.
• Familiarity with refutation-based analysis techniques is a plus.

Working Conditions

• Remote-first working arrangement.
• Expected travel: 1 day per month on-site in Derby.
• Start: January