Product Security Engineer
Are you an experienced Security professional looking to make a real impact within Defence and Aerospace? We're recruiting on behalf of a growing SME working across the full product design lifecycle, where you'll play a critical role safeguarding cutting-edge products and systems.
About the Role
As Product Security Engineer, you'll work closely with Project Teams across engineering, product development and quality assurance to embed Secure by Design (SbD) principles and security best practice throughout the product lifecycle, producing and delivering Product Security Assurance artefacts to meet customer requirements.
What You'll Be Doing
Primarily hybrid, with a minimum of 2 days per week in the office, project demands will occasionally require full-time office presence.
What's on Offer
About the Role
As Product Security Engineer, you'll work closely with Project Teams across engineering, product development and quality assurance to embed Secure by Design (SbD) principles and security best practice throughout the product lifecycle, producing and delivering Product Security Assurance artefacts to meet customer requirements.
What You'll Be Doing
- Undertaking Project Security risk analysis
- Ensuring project Security deliverables and processes are developed and delivered in line with customer requirements
- Developing and implementing Product Security Policies
- Contributing manpower estimates to the bid process
- Chairing internal and external Project Security Reviews and Working Groups
- Must hold, or be able to obtain, UK SC security clearance
- Must be a Sole British Citizen
- Solid experience in Information Security (IS) within a project environment
- Familiarity with Information Assurance (IA), including RMADS or SbD documentation
- Strong communication skills with the ability to work autonomously and adapt to changing project demands
- Experience with NIST 800 series, CESG Good Practice Guides, or NCSC risk assessment methodology
- Familiarity with Defence Security Standards (Def Stan 05-138, Def Stan 05-139, JSP440, Security Policy Framework)
- Background in Risk Management, DevSecOps, EMC or TEMPEST
- Previous experience in Defence Security or a related sector (military, MoD, or contracting)
Primarily hybrid, with a minimum of 2 days per week in the office, project demands will occasionally require full-time office presence.
What's on Offer
- Salary up to £70,000, plus up to 24 additional holiday days per year
- Competitive employer-matched pension and Private Medical Care (50+ clinics/hospitals)
- Flexible core hours, salary sacrifice schemes, and onsite gym at Chertsey
- Company-provided laptop, mobile and home office equipment, plus relocation package
- Genuine investment in training, career development and full lifecycle project exposure