Security and Assurance Engineer

Job Description

• Salary: Up to £60,000 D0E
• Full Time
• Permanent

Who we are: SubSea Craft is a fast growing, privately-funded, UK-based innovative maritime technology company specialising in next-generation, high-performance watercraft and systems. We operate at the intersection of advanced engineering, cutting-edge design, and user-centric innovation, delivering safe, effective, and enabling solutions for both commercial and defence applications.

What we offer:

• Annual Leave – Entitlement to 25 days of annual leave plus bank holidays
• Wellbeing Day - An additional Wellbeing Day each year to focus on personal health and wellbeing.
• Private Healthcare – Access to comprehensive private healthcare coverage to support your physical and mental wellbeing.
• Life Assurance and Critical Illness Cover – Comprehensive protection including Life Assurance (4x salary) and Critical Illness Cover for added financial security.
• Family Leave – Enhanced maternity and paternity pay
• Christmas Leave – A Christmas shutdown is typically observed.
• Professional Development – Commitment to ongoing learning and career growth, supported by training programmes and access to LinkedIn Learning.
• Pension Contribution – pension scheme with the option to contribute via salary sacrifice
• Flexible Working – Opportunities for flexible working arrangements to promote work–life balance.
• Inclusive Culture – A professional environment that values diversity, innovation, and collaboration.

Responsibilities will include:

• Lead the identification, assessment, and analysis of security vulnerabilities across platform systems, networks, software, and supporting infrastructure.
• Define, evaluate, and influence proportionate mitigations and protective measures that reduce security risk and improve resilience against physical, cyber, and supply-chain threats.
• Own platform Security Acceptance Cases, security assurance reports, risk assessments, and the generation and maintenance of supporting evidence.
• Collaborate with systems, software, hardware, and operations engineering teams, providing technical leadership and pragmatic security guidance throughout the design lifecycle.
• Review architectures, designs, requirements, and change proposals to identify security weaknesses and ensure that security controls are embedded from the outset.
• Ensure compliance with applicable security standards, regulations, contractual requirements, and organisational policies, such as ISO/IEC standards, Cyber Essentials Plus, DEF STAN, and NIST frameworks.
• Maintain an informed view of attacker techniques, emerging vulnerabilities, threat intelligence, and industry trends, applying this knowledge to continually improve SSC’s security posture.
• Develop and maintain threat models for relevant attack vectors, assets, trust boundaries, and abuse cases, translating findings into actionable security requirements.
• Manage incident preparedness and security testing, including the planning and coordination of physical and digital penetration testing for platform infrastructures.
• Support security incident response, investigations, lessons learned, and the implementation of corrective and preventative actions.
• Track security risks, vulnerabilities, and remediation activities, reporting progress and residual risk to relevant stakeholders.
• Promote a strong security culture through clear communication, knowledge sharing, and constructive engagement with technical and non-technical stakeholders.
• Collaborate with cross-functional teams, including mechanical, electrical, and control engineers, to achieve integrated and cohesive system solutions.

Qualifications and Experience:

Required:

• A bachelor’s degree in computer science, computer engineering, cyber security, or a related discipline; equivalent practical experience in a security or engineering role will also be considered.
• Significant professional experience in security engineering, systems engineering, platform assurance, or a comparable role within defence, aerospace, critical national infrastructure, or another security-critical environment.
• Practical experience identifying vulnerabilities, assessing risk, developing security requirements, and selecting or validating proportionate mitigations across complex platforms and infrastructure.
• Experience producing security assurance cases, risk assessments, technical reports, compliance evidence, and clear briefings for technical and senior stakeholders.
• Working knowledge of secure-by-design principles, threat modelling methodologies, vulnerability management, incident response, security testing, and penetration-testing lifecycles.
• Knowledge of relevant security standards and frameworks, including ISO/IEC 27001, Cyber Essentials Plus, DEF STAN 05-138, NIST SP 800-171, and applicable risk-management principles.
• Ability to communicate complex security issues clearly, influence design decisions, and work effectively with multidisciplinary engineering and delivery teams.
• Industry certification such as CISSP, CISM, CompTIA Security+, CySA+, SABSA, or an equivalent professional qualification is desirable.
• Experience of security assessments, penetration testing, incident investigations, or security accreditation within regulated or safety-critical environments is desirable.
• Commitment to maintaining professional knowledge of evolving threats, defensive technologies, security standards, and regulatory expectations.
• Desirable to be conversant with Jira and Confluence
• Desirable to have experience with marine or autonomous.
• Desirable to have experience of using 3rd party test facilities to deliver assurance evidence.
• Professional registration (IEng / CEng) or working towards is desirable

Note: Due to the nature of work undertaken at SubSea Craft, the selected candidate must be capable of meeting the security requirements of the position, which would include as a minimum existing right to live and work in the UK, Baseline Personnel Security Standard (BPSS), with UK National security clearance required for certain roles.*

Values: Our people are our greatest asset, we continually strive to provide an excellent working environment to enable our team to do their best work. We have an agile professional workforce: we are founded on the belief that our people are valued and our business is trusted, inclusive and commercially-adept.

What we expect from you:

• Teamwork, mutual respect and collaboration
• Initiative and independent working
• Honesty and integrity
• Business and commercial awareness
• Agility, adaptability and continuous development

We are committed to building an inclusive, diverse workplace where everyone can thrive. If you require any support or adjustments to interact with us, please let us know.

*Please note that all offers of employment are conditional and subject to satisfactory DBS, driving license and reference checks. A criminal record will not automatically disqualify candidates from employment. We will consider criminal record information alongside the wider range of evidence gathered at the application, interview, and pre-employment checking stages.

Due to the high volume of applications, we are unable to respond to everyone. If you are shortlisted, we will aim to contact you within 14 days of your application or the closing date (if stated). We may retain your details for future suitable roles unless you advise us otherwise.

For details of how we process your personal data, please refer to our Privacy Notice.