Cybersecurity Configuration Consultant at Methods Business and Digital Technology, Remote/Derby, £650 per day

Cybersecurity Certification Consultant (Contract)

Location: Remote with monthly on-site visits in Derby
Rate: £650 per day (Outside IR35)
Contract Length: Running until end of January (with extension potential)
Clearance Requirement: Active SC clearance is essential

Overview:
We are seeking an experienced Cybersecurity Certification Consultant to support the development of security documentation in line with AMC 20-42, ED-202A, and ED-203A standards. This role focuses on defining and delivering certification-specific artefacts for aviation systems within a highly regulated environment.

Key Responsibilities:

• Author and refine certification documentation in alignment with AMC 20-42, ED-202A, and ED-203A, specifically the following:

o System Security Architecture and Measures (SSAM)
o Preliminary System Security Risk Assessment - Security Case Report (PSSRA SCR)
o Plan for Security Aspects of Certification (PSecAC)
o System Security Scope Definition (SSSD)

• Identify and document the Security Perimeter
• Document system overview, covering all interfaces and trust boundaries in scope of the Security Environment
• Identify Failure Conditions through existing Safety Analysis
• Identify Threat Conditions through cyber security assessment based on identified Failure Conditions
• Identify and document Threat Scenarios
• Perform an asset-based Risk Assessment, including identifying Access Vectors
• Complete Common Criteria Applicability and Traceability mapping

Requirements:
Required Experience:

• Active Security Clearance (SC) is mandatory.
• Proven experience with ED-202A and ED-203A standards in an aerospace or highly regulated environment.
• Strong understanding of AMC 20-42 guidance and certification expectations.
• Demonstrated experience delivering security documentation and certification artefacts.
• Knowledge and experience of the Unified Modelling Language.
• Background in systems engineering, cybersecurity V&V, and risk assessment.
• Familiarity with refutation-based analysis techniques is a plus.

Working Conditions:

• Remote-first working arrangement.
• Expected travel: 1 day per month on-site in Derby.
• Start: January