Security Assurance Engineer — Aegis Platform

What the role is responsible for.

• Own the platform assurance case — claims, arguments, and the evidence that supports each.
• Design and oversee verification of the constraints that bound autonomous action.
• Lead adversarial assessment of the platform against realistic attacker models, in a controlled environment.
• Sign, or decline to sign, the assurance position at each deployment gate.
• Work with Ethics & Governance on the disclosure and accountability provisions attached to autonomous response.

What we need you to bring.

• Twelve or more years in security engineering, assurance, or safety-critical verification.
• Experience building an assurance or safety case that an external authority accepted.
• Deep understanding of control-system and network security in an operational setting.
• Willingness to hold a negative position under schedule pressure.
• Active or eligible TS · SCI; vetting is sponsored.

Useful, not essential.

• Formal methods or model-based verification background.
• Experience with accreditation under a recognised assurance framework.
• Prior work on systems with autonomous or automated actuation.

We read the preferred list as a description of a useful background, not a checklist. Candidates who meet the required list and none of the preferred are regularly hired.

Who you would be joining.

Aegis engineering is a large, compartmented programme. The assurance group is intentionally independent of delivery management and reports through the Chief Engineer.

What to know before you apply.

This role has stop authority. That authority is written into the offer, not implied.

All candidates undergo comprehensive vetting. Reasonable accommodation is available at any stage — say so in your first note and it will be arranged. We do not use unverified third-party recruiters, and we never ask a candidate for a fee.