Cryptosecurity Engineer

at  QinetiQ

Role Purose
The role exists to
Support all stages in the delivery of customer focused research, consultancy design and analysis in the field of cryptography and key management.
Interact with Subject Matter Experts working in multi-disciplinary, multi organisation teams to deliver customer-focused solutions.
Key Accountabilties
Contribute to the development of proposals in response to requests from customers and consortium partners in crypto security domain
Working with others within QinetiQ identify and derive security requirements, develop/analyse innovative solutions, and understand/shape both the “big picture” and technical details in crypto security domain
Deliver high quality analysis, designs, reports, and presentations that focus on customer problems and solutions in cryptosecurity domain
Key Capabailties / Knowledge
Understand cyber security, its significance, concepts, threats, vulnerabilities and assurance.
Awareness of digital technology trends and a desire to stay up to date with the latest threats and solutions.
Able to apply adversarial mind-set. How to attack and break the security of systems.
Understand how High grade crypto and key management is employed to achieve security outcome
Understand high-level security objectives and break these down into the security requirements for a crypto system.
Understand that meeting not all security objectives in a system may be achievable and that trades are required.
Able to express a security trade based on topics such as overall system performance, legal requirements, time and budget.
Understand cryptographic algorithms, what functions they do and do not deliver and how they fit together to enable secure protocols.
Analyse complex communication and key management protocols, understand their operation, support engineers implementing these standards and communicate with specification authors.
Able to apply technical skills at an engineering level to IT and crypto equipment. May include programming or automation scripts within well-defined scope
Knowledge of crypto and key management R&D or product design for a standards regulated market (e.g. UK Government CAPS, FIPS, PCI DSSS)
Demonstrate rigor in performing equipment interoperability and conformance experiments and recording results. Suitable for customers to make acceptance decisions.
Awareness of security architectures and security technology (hardware, software)
Applying critical thinking to analyse and solve problems as they arise
Able to collaborate and work as part of a team
Able to engage and communicate effectively with stakeholders including customers
Able to work independently with some supervision, seeking guidance on own initiative for unusual or unfamiliar situation

Please refer the Job description for details