I am a recent Bachelor's graduate in computer science - I have been employed in the field for less than a year.
My current employer is asking me to design and implement a relatively advanced information security schema, and it makes me somewhat uncomfortable. I am willing to try my best, but I have not been formally trained in security at all, and have no workplace experience in engineering security.
How can I best communicate that, "if you trust me with no qualifications to design this system, and something goes wrong, that's your fault for not hiring an actual information security expert?"
Also - is there any way that this could impact me legally? I do not want to be legally liable if I am fully aware of my inexperience and lack of qualifications.
I am a contractor, not a full-time employee.