V03078 - Advanced Apprentice Cyber Security Technician - Technology Enablement
BAE SYSTEMS PLC
Cumbria, LA14 1AF
Closes on Friday 28 February
Posted on 8 November 2024
Contents
Summary
Our Submarines business has been safely delivering world class submarines to the UK Royal Navy for more than a century. The Astute class will equip the Royal Navy with its largest and most capable generation of attack submarines. We are responsible for the design, build, test and commissioning of these state-of-the-art vessels.
- Annual wage
-
Competitive
Minimum wage rates (opens in new tab)
We offer a competitive salary with annual increases throughout the apprenticeship and a range of employee benefits including, free higher education as well as access to the Company pension and share saving scheme
- Training course
- Cyber security technician (level 3)
- Hours
-
Shifts to be confirmed
37 hours a week
- Possible start date
-
Monday 15 September
- Duration
-
2 years
- Positions available
-
3
Work
As an apprentice, you’ll work at a company and get hands-on experience. You’ll gain new skills and work alongside experienced staff.
What you’ll do at work
Through a rotation of placements, you will also have the opportunity to learn about other areas of Technology Enablement and the business, putting our security requirements into context. To support your learning and development and to compliment your studies, you will work with our experienced teams who will mentor and coach you whilst working on real life tasks.
Within the Submarines business, we have three Technology Enablement Security Teams:
- Cyber Security Architecture & Services
- Information Security
- Supplier Security Assurance
- A lot of the work that these teams undertake involves supporting incident and vulnerability management, security breach investigation, strengthening and enhancing how we protect our information and IT infrastructure, increasing security awareness and ensuring that internal and external colleagues comply with our policies and our security requirements
- Gain an insight into the development, definition, management and delivery of Cyber Incident Response – including documentation and testing
- Develop an understanding of the security architecture across all IT infrastructure, networks, systems and applications – both in projects and ad-hoc
- Understand the importance of Information Security and applies this to their own work and operations within the organisation
- Communicate security risks and issues to business managers and others and then applies and maintains specific security controls as required by organisational policy and local risk assessments
- Support incident/ issue and vulnerability management. Support the investigation of minor security breaches in accordance with established procedures
- Assist users in defining their access rights and privileges. Perform non-standard security administration tasks and resolves security administration issues
- Provide advice and guidance to business stakeholders on security best practice and application of Security policies and processes in order to ensure compliance and/or risk management facilitating delivery of business objectives in line with contractual obligations and corporate standards
- Gather data, analyse and prepare reports or presentations to feed information back to teams/managers
- Conduct and support security risk assessments and facilitates remedial activities to improve security performance
Where you’ll work
BAE Systems
1st Floor, Main Shipyard Offices
Barrow-in-Furness
Cumbria
LA14 1AF
Training
An apprenticeship includes regular training with a college or other training organisation. At least 20% of your working hours will be spent training or studying.
College or training organisation
BAE SYSTEMS PLC
Your training course
Cyber security technician (level 3)
Equal to A level
Course contents
- Follow information security procedures
- Maintain information security controls
- Develop information security training and awareness resources
- Monitor the effectiveness of information security training and awareness
- Handle and assess the validity of security requests from a range of internal and external stakeholders
- Follow technical procedures to install and maintain technical security controls
- Monitor and report information security events
- Recognise when and how to escalate information security events in accordance with relevant procedures and standards
- Review and modify access rights to digital information systems, services, devices or data
- Maintain an inventory of digital information systems, services, devices and data storage
- Scopes cyber security vulnerability assessments
- Evaluate the results of a cyber security vulnerability assessment
- Perform routine threat intelligence gathering tasks through consulting external sources
- Undertake digital information risk assessments
- Identify and categorise threats, vulnerabilities and risks in preparation for response or escalation
- Document cyber security event information whilst preserving evidence
- Draft information management reports using standard formats appropriate to the recipients
- Review and comment upon cyber security policies, procedures, standards and guidelines
- Perform cyber security compliance checks
- Translate audit requirements and collate relevant information from log files, incident reports and other data sources
- Communication skills to co-operate as part of a multi-functional, multi-disciplinary team using a range of technical and non-technical language to provide an effective interface between internal or external users and suppliers
- Keep up-to-date with legislation and industry standards related to the implementation of cyber security in an organisation
- Follow information security procedures
- Maintain information security controls
- Develop information security training and awareness resources
- Monitor the effectiveness of information security training and awareness
- Handle and assess the validity of security requests from a range of internal and external stakeholders
- Follow technical procedures to install and maintain technical security controls
- Monitor and report information security events
- Recognise when and how to escalate information security events in accordance with relevant procedures and standards
- Review and modify access rights to digital information systems, services, devices or data
- Maintain an inventory of digital information systems, services, devices and data storage
- Scopes cyber security vulnerability assessments
- Evaluate the results of a cyber security vulnerability assessment
- Perform routine threat intelligence gathering tasks through consulting external sources
- Undertake digital information risk assessments
- Identify and categorise threats, vulnerabilities and risks in preparation for response or escalation
- Document cyber security event information whilst preserving evidence
- Draft information management reports using standard formats appropriate to the recipients
- Review and comment upon cyber security policies, procedures, standards and guidelines
- Perform cyber security compliance checks
- Translate audit requirements and collate relevant information from log files, incident reports and other data sources
- Communication skills to co-operate as part of a multi-functional, multi-disciplinary team using a range of technical and non-technical language to provide an effective interface between internal or external users and suppliers
- Keep up-to-date with legislation and industry standards related to the implementation of cyber security in an organisation
Your training plan
- Cyber Security Technician Level 3 Apprenticeship Standard
- At least 20% of your working hours will be spent training or studying
Requirements
Essential qualifications
GCSE in:
- 5 GCSE Inc Maths, English & Science or Technical (grade A*-C or 9-4 (or equivalent))
Let the company know about other relevant qualifications and industry experience you have. They can adjust the apprenticeship to reflect what you already know.
Skills
- Communication skills
- Organisation skills
- Team working
About this company
At BAE Systems, we provide some of the world’s most advanced, technology-led defence, aerospace and security solutions. We employ a skilled workforce of more than 93,000 people in around 40 countries. Working with customers and local partners, we develop, engineer, manufacture, and support products and systems to deliver military capability, protect national security, and keep critical information and infrastructure secure.
Company benefits
As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing & lifestyle benefits, including a green car scheme, private health plans and shopping discounts.
Disability Confident
A fair proportion of interviews for this apprenticeship will be offered to applicants with a disability or long-term health condition. This includes non-visible disabilities and conditions.
You can choose to be considered for an interview under the Disability Confident scheme. You’ll need to meet the essential requirements to be considered for an interview.
After this apprenticeship
- Approximately 95% of apprentices choose to stay on with us. As a global business there are a world of opportunities – whether you decide to stay in the UK, or explore an overseas role
Ask a question
The contact for this apprenticeship is:
BAE SYSTEMS PLC
Early Careers Recruitment Team
GART@baesystems.com
The reference code for this apprenticeship is VAC1000285751.
Apply now
Closes on Friday 28 February
When you apply, you’ll be asked to sign in with a GOV.UK One Login. You can create one at the same time as applying for this apprenticeship.
After signing in, you’ll apply for this apprenticeship on the company's website.