Senior Product Security Engineer

Job Title: Lead Product Security Engineer

Location: Luton (Hybrid)

Key Responsibilities

• Lead product security activities across the full product lifecycle, from concept and design through to deployment, maintenance and retirement.
• Conduct security risk assessments, threat analysis, risk mitigation planning and gap analysis activities.
• Produce security management plans, security cases, assurance documentation and supporting bid material.
• Define and derive product security requirements and work closely with engineering teams to implement appropriate security controls.
• Support system accreditation and assurance activities, liaising with internal stakeholders and external security authorities.

Requirements

• Experience delivering product security solutions within Defence, Government, Aerospace or highly regulated environments.
• Strong understanding of security risk assessment, security assurance and secure system design principles.
• Practical knowledge of recognised security standards and frameworks including ISO 27001, NIST, MOD Secure by Design, GovS 007 and JSP security policies.
• Experience producing technical security documentation such as Security Cases, Security Operating Procedures, Key Management Plans and Test Security Instructions.
• Knowledge of cryptographic technologies, key management systems and secure communications architectures.
• Knowledge of NATO security policy, accreditation and risk management frameworks.
• Understanding of Model Based Systems Engineering (MBSE) and its application to product security.