role	role_level	band	skill	skill_source	pcf_reference	esco_reference	expected_level	expected_level_number	expected_level_description	self_rating	manager_rating	gap	evidence	development_action
Security engineer	Lead security engineer	8a	Security technology	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/dad7e408-162f-46a4-8567-db560e19e2fc; http://data.europa.eu/esco/skill/5898d99a-62a4-4e10-a2e3-0d815ce44248; http://data.europa.eu/esco/skill/501537a7-9d63-491d-ae02-09f04767ff1e	expert	4	You can: - explain complex system architectures - identify and explain how easy or difficult it will be to exploit vulnerabilities - lead and influence security technology in the security industry					
Security engineer	Lead security engineer	8a	Information security	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/6833e58b-eceb-4599-9375-1b7e6ec64087; http://data.europa.eu/esco/skill/8088750d-8388-4170-a76f-48354c469c44	practitioner	3	You can: - design solutions and services with security controls included, specifically engineered to mitigate security threats					
Security engineer	Lead security engineer	8a	Designing secure systems	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/6f1edc19-191f-4ba5-a048-ee69aff05bab; http://data.europa.eu/esco/skill/958559fd-7ab8-44f6-9d65-eb521dc308a5; http://data.europa.eu/esco/skill/3ff589b7-68df-4ea5-ae41-b395bdb2378f	practitioner	3	You can: - design and review system architectures through the development of patterns and principles					
Security engineer	Lead security engineer	8a	Cyber risk management	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/69cfc5ed-6569-4aca-a4cc-fd782ba51d9c; http://data.europa.eu/esco/skill/fe1c2b32-7fe9-4668-affa-07ff658a68cf; http://data.europa.eu/esco/skill/96ec2d53-4f41-4172-8ef2-70742c4bb540	practitioner	3	*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: - maintain a clear understanding of the cyber and information security risks across the whole organisation - develop and implement risk assessment processes - oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities Examples of leadership using this skill: - building a culture where teams have awareness of, and take responsibility for, risks and mitigating them - advising programme owners and people running IT services about risks in a way that enables them to act on that advice - communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk					
Security engineer	Lead security engineer	8a	Identity and access management	this reference		http://data.europa.eu/esco/skill/ab49f767-296b-47d5-af56-0b4a69515b03; http://data.europa.eu/esco/skill/bc0b0b5d-f6be-405a-b224-b6902a4dbe97	practitioner	3	You can: - design and run identity and access services - review access regularly and fix problems 					
Security engineer	Lead security engineer	8a	Vulnerability management	this reference		http://data.europa.eu/esco/skill/fe1c2b32-7fe9-4668-affa-07ff658a68cf; http://data.europa.eu/esco/skill/902fb91c-3113-4004-9b4f-79aa86b638b7	practitioner	3	You can: - prioritise vulnerabilities by risk, including to patient services - scope and manage penetration tests and remediation 					
Security engineer	Lead security engineer	8a	Security operations	this reference		http://data.europa.eu/esco/skill/8181aa4c-42bc-4036-a3d2-5cb6bbb34239; http://data.europa.eu/esco/skill/5898d99a-62a4-4e10-a2e3-0d815ce44248; http://data.europa.eu/esco/skill/501537a7-9d63-491d-ae02-09f04767ff1e	practitioner	3	You can: - investigate and contain security incidents - write detection rules and threat hunts - improve runbooks and tooling after incidents 					
Security engineer	Lead security engineer	8a	Information governance and data protection	this reference		http://data.europa.eu/esco/skill/a4346013-a967-4a58-a533-6b32ad1364c5; http://data.europa.eu/esco/skill/51ece34f-c24e-4183-9bf4-9b6f28748aec; http://data.europa.eu/esco/skill/097c6a36-f031-4d3e-b5c1-62d6ffcb430b	practitioner	3	You can: - lead data protection impact assessments and information sharing agreements - advise teams on lawful basis, consent, confidentiality, and retention - investigate incidents and recommend improvements 					
Security engineer	Lead security engineer	8a	Understanding health and care services	this reference		http://data.europa.eu/esco/skill/9b63d92b-5a3a-46b0-b2ba-c98b39ea5aaf; http://data.europa.eu/esco/skill/6c252ea9-e7df-4f82-8035-7d7ee742ff0e	working	2	You can: - explain the clinical and care workflows your work supports - use common health care terms correctly with clinical and care colleagues - recognise when a change could affect patient care and raise it 					
Security engineer	Lead security engineer	8a	People management	this reference		http://data.europa.eu/esco/skill/339ac029-066a-4985-9f9d-b3d7c8fea0bb; http://data.europa.eu/esco/skill/add39442-b8ca-4412-8156-391db53b0c5d	working	2	You can: - supervise day-to-day work and give feedback - take part in recruitment and induction - hold regular one-to-one conversations