Engineer the Quantum RevolutionYour expertise can help us shape the future of quantum computing at Oxford Ionics.

View Open Roles

Aerospace Cybersecurity Technical Lead

Expleo Group
Bristol
3 weeks ago
Create job alert

Join to apply for the Aerospace Cybersecurity Technical Lead role at Expleo Group

3 days ago Be among the first 25 applicants

Join to apply for the Aerospace Cybersecurity Technical Lead role at Expleo Group

Get AI-powered advice on this job and more exclusive features.

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness unrelenting technological change to deliver innovations that provide a competitive advantage and improve everyday life worldwide.

As part of the Expleo Digital and Emerging Technology (DET) team, you will report to the Head of Cybersecurity and join our established Cybersecurity Practice. We seek a highly experienced Aerospace Cybersecurity Technical Lead to support our strategic aerospace engagements and deliver cybersecurity engineering and assurance support to our client base.

This role will lead the technical delivery of cybersecurity artefacts aligned to EASA, UK CAA and associated airworthiness regulations. You will support developing and refining our client's Airworthiness Security Process (AWSP) and oversee the creation of core artefacts to support certification.

This client-facing role ideally suits someone with deep experience in aerospace system security, airworthiness security assurance, and regulatory alignment. You will be a trusted advisor to engineering teams and Expleo cybersecurity consultants, ensuring best-practice alignment, efficient delivery, and high-quality outputs across the certification lifecycle.

Responsibilities

  • Act as the technical lead for cybersecurity delivery to aerospace clients, ensuring alignment with the development roadmap and certification programme.
  • Provide subject matter expertise on airworthiness security, system security engineering, and certification artefact production aligned to EASA and UK CAA expectations.
  • Lead the development and review of cybersecurity documentation, including the PSecAC (Airworthiness Security Process Plan), PASRA (Preliminary Aircraft Security Risk Assessment), ASAM (Aircraft Security Architecture Model), and Security Verification Methods.
  • Provide input into the AWSP frameworks, including the tailoring of compliance checklists, activity outcomes, and document templates.
  • Ensure traceability between security risk assessments, controls, and compliance objectives across the aircraft systems and software architecture.
  • Coordinate the development of cybersecurity methods and processes, contributing to their alignment with recognised standards.
  • Engage with DAG’s internal stakeholders, including engineering, safety, and systems integration teams, to embed cybersecurity into the design and certification lifecycle.
  • Act as the primary technical interface for cybersecurity between Expleo and clients, supporting queries, reviews, and audits.
  • Support internal QA and delivery governance for all security engineering artefacts, ensuring consistency, rigour, and traceability to certification requirements.
  • Provide mentoring and support to Expleo consultants embedded in the client workstreams, sharing knowledge and building internal aerospace security capability.

Qualifications

  • A degree (or equivalent experience) in Aerospace Engineering, Systems Engineering, Cybersecurity, or a related technical discipline.
  • Recognised cybersecurity certifications (e.g., CISSP, CISM, GICSP, CCSK) and/or relevant systems engineering accreditations (INCOSE ASEP/CSEP).
  • Formal training or applied experience with aviation cybersecurity standards such as ED-202A/DO-326A, DO-355A, ED-203A, DO-356A.
  • Understanding of EASA and UK CAA certification frameworks.
  • Familiarity with MBSE tools and model-based security approaches, ideally including experience with Capella, MagicDraw, or SysML.
  • Experience working within Design Organisations (DOA) or with organisations under delegated regulatory oversight.

Essential Skills

  • In-depth knowledge of aircraft systems, avionics networks, data buses (ARINC 429, AFDX), and embedded platform architectures.
  • Strong grasp of cybersecurity engineering principles in the context of safety-critical systems and regulated environments.
  • Demonstrated experience leading the development of cybersecurity assurance artefacts for certification programmes.
  • Practical understanding of airworthiness risk modelling, threat identification, attack surface reduction, and aircraft-level threat scenarios.
  • Ability to produce certification-ready documentation aligned to EASA/UK CAA guidance, including traceability to compliance objectives.
  • Strong communication and interpersonal skills, with the ability to translate complex cybersecurity concepts for engineering, safety, and programme stakeholders.
  • Knowledge of aerospace cybersecurity policy, risk management, and threat intelligence as applied to aircraft development environments.
  • Collaborative and detail-oriented, able to work across international teams and regulatory boundaries.

Desired Skills

  • Experience supporting cybersecurity assurance within other EASA/UK CAA-regulated aerospace programmes .
  • Familiarity with Capella, Polarion , or other MBSE platforms in the context of security architecture and systems modelling.
  • Practical understanding of Secure Software Development Assurance (SSDA) and interaction between security and safety lifecycles.
  • Experience responding to regulatory audits, design reviews, and certification authority engagements .
  • Understanding aircraft production and supply chain security , including configuration management, supplier assurance, and design data integrity.
  • Exposure to digital threat modelling techniques tailored to aerospace domains ( MITRE ATT&CK for ICS/Aerospace , STRIDE-LM).
  • Ability to contribute to internal capability development, methodology refinement, and knowledge transfer across delivery teams.

Experience

  • Minimum of 7–10 years of experience in cybersecurity, with at least 5 years focused on aerospace, defence, or regulated engineering environments.
  • Proven track record of delivering security artefacts in support of product certification or aircraft programme development.
  • Previous experience supporting or working within a DOA or similar regulated environment.
  • Hands-on involvement with aircraft-level cybersecurity engineering, including network segmentation, security zones, access control, and data integrity assurance.
  • Experience working across multi-disciplinary teams involving engineering, avionics, software, safety, and regulatory specialists.
  • Familiarity with regulatory alignment processes and compliance checklists for EASA and/or UK CAA cybersecurity requirements

What Do I Need Before I Apply

  • You must have the right to work in the UK.
  • A strong background in aerospace cybersecurity, systems assurance, and security engineering within regulated environments.
  • Demonstrable experience producing cybersecurity artefacts for regulated clients and/or aviation platforms.
  • The ability to lead technical delivery workstreams, mentor others, and engage with senior stakeholders in complex aerospace programmes.

Benefits

  • Collaborative working environment – we stand shoulder to shoulder with our clients and ourpeers through good times and challenges
  • We empower all passionate technology-loving professionals by allowing them to expand their skills and take part in inspiring projects
  • ExpleoAcademy - enables you to acquire and develop the right skills by delivering a suite of accredited training courses
  • Competitive company benefits
  • Always working as one team, our people are not afraid to think big and challenge the status quo
  • As a Disability Confident Committed Employer we have committed to:
    • Ensure our recruitment process is inclusive and accessible
    • Communicating and promoting vacancies
    • Offering an interview to disabled people who meet the minimum criteria for the job
    • Anticipating and providing reasonable adjustments as required
    • Supporting any existing employee who acquires a disability or long-term health condition, enabling them to stay in work at least one activity that will make a difference for disabled people

“We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of race, sex, disability, religion/belief, sexual orientation or age”.

We treat everyone fairly and equitably across the organisation, including providing any additional support and adjustments needed for everyone to thrive.Seniority level

  • Seniority levelMid-Senior level

Employment type

  • Employment typeContract

Job function

  • Job functionInformation Technology
  • IndustriesIT Services and IT Consulting

Referrals increase your chances of interviewing at Expleo Group by 2x

Sign in to set job alerts for “Security Technician” roles.

Bristol, England, United Kingdom 2 weeks ago

Bristol, England, United Kingdom 1 month ago

Bristol, England, United Kingdom 6 days ago

Greater Bristol Area, United Kingdom 2 weeks ago

Defence Digital Cyber Vulnerability Management Associate

Corsham, England, United Kingdom 1 week ago

Corsham, England, United Kingdom 1 day ago

Bristol, England, United Kingdom 1 day ago

Bristol, England, United Kingdom 1 day ago

Cardiff, Wales, United Kingdom £66,779.00-£110,389.00 11 hours ago

Bristol, England, United Kingdom 6 hours ago

Newport, Wales, United Kingdom 1 month ago

Bristol, England, United Kingdom 3 weeks ago

Corsham, England, United Kingdom 2 weeks ago

Cardiff, Wales, United Kingdom £66,779.00-£66,779.00 11 hours ago

Bristol, England, United Kingdom 2 weeks ago

Bristol, England, United Kingdom 1 day ago

Greater Bristol Area, United Kingdom 1 day ago

Bristol, England, United Kingdom 1 week ago

Bristol, England, United Kingdom 3 weeks ago

Bristol, England, United Kingdom 12 hours ago

Bristol, England, United Kingdom 2 weeks ago

Greater Bristol Area, United Kingdom 3 weeks ago

Assistant Security Consultants / Security Engineers - Property and Buildings

Bristol, England, United Kingdom 1 month ago

Bristol, England, United Kingdom 2 weeks ago

Bath, England, United Kingdom 2 weeks ago

Vulnerability Researcher Remote Up to £135k + Benefits

Bristol, England, United Kingdom 2 weeks ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.


#J-18808-Ljbffr

Related Jobs

View all jobs

Aerospace Cybersecurity Technical Lead

Aerospace Cybersecurity Technical Lead

Aerospace Cybersecurity Technical Lead

Aerospace Cybersecurity Technical Lead

Subject Matter Expert – Product Cybersecurity (IoT/Connected Devices)

Subject Matter Expert – Product Cybersecurity (IoT/Connected Devices)

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Pre-Employment Checks for Cyber Security Jobs: DBS, References & Right-to-Work and more Explained

The cyber security sector in the UK stands at the forefront of protecting national infrastructure, business operations, and personal data from increasingly sophisticated cyber threats. As organisations across all sectors recognise cyber security as a critical business function, employers are implementing the most rigorous pre-employment screening processes in the technology industry to ensure they recruit professionals capable of defending against advanced persistent threats and maintaining the highest standards of security and trustworthiness. Whether you're a penetration tester, security analyst, incident response specialist, or chief information security officer, understanding the comprehensive vetting requirements is essential for successfully advancing your career in this security-critical field. This detailed guide explores the extensive background checks and screening processes you'll encounter when applying for cyber security positions in the UK, from fundamental eligibility verification to the most stringent security clearance requirements and specialised threat intelligence assessments.

Why Now Is the Perfect Time to Launch Your Career in Cyber Security: The UK's Digital Defence Revolution

The United Kingdom faces an unprecedented cyber security challenge that presents an extraordinary career opportunity. With cyber attacks increasing by 300% year-on-year and the average cost of a data breach reaching £4.24 million, Britain urgently needs skilled cyber security professionals to defend its digital infrastructure, protect citizens' data, and maintain national security in an increasingly connected world. If you've been considering a career change or seeking to future-proof your professional trajectory, cyber security represents one of the most secure, well-compensated, and socially impactful career choices available. The convergence of escalating threats, skills shortage, government investment, and regulatory requirements has created a perfect storm of opportunity that shows no signs of abating.

Automate Your Cyber Security Jobs Search: Using ChatGPT, RSS & Alerts to Save Hours Each Week

Cyber roles drop across consultancies, MSSPs, hyperscalers, banks, gov & start-ups every day—often buried in ATS portals or duplicated across boards. The fix is simple: put discovery on autopilot with keyword-rich alerts, RSS feeds & a reusable ChatGPT workflow that triages listings, ranks fit, & tailors your CV in minutes. This copy-paste playbook is built for www.cybersecurityjobs.tech readers. It’s UK-centric, practical, & designed to save you hours each week. What You’ll Have Working In 30 Minutes A role & keyword map spanning SecOps/Detection, DFIR, AppSec, Cloud Security, GRC, Red Team, Threat Intel, IAM/PAM, OT/ICS & Vulnerability Management. Shareable Boolean search strings for Google & job boards to cut noise fast. Always-on alerts & RSS feeds delivering fresh roles to your inbox/reader. A ChatGPT “Cyber Job Scout” prompt that deduplicates, scores fit & outputs tailored actions. A simple pipeline tracker so deadlines & follow-ups never slip.