Senior Product Security Engineer

Lead Product Security Engineer Luton HQ – 3-4 days onsite Up to £89.50 p/h Inside IR35 Security Clearance is essential (DV would be desirable) Are you an experienced security cleared Lead Product Security Engineer with a background in Defence, Government or other security-critical environments? We are looking for a Product Security Engineer to take responsibility for the security aspects of product design, development, verification and maintenance throughout the full product lifecycle. You will work closely with product development and engineering teams to undertake security risk assessments, define security requirements, develop mitigation plans and implement appropriate security controls.

What You’ll Do

• Produce Security Management Plans, work package descriptions and cost estimates to support bids, services and proposals.
• Undertake security risk assessments, mitigation planning, gap analysis and security management documentation for system assurance.
• Define product security requirements and advise engineering teams on the implementation of security controls.
• Work closely with product development teams throughout the engineering lifecycle to ensure security is embedded by design.
• Work collaboratively with external security organisations, including relevant national security authorities, to support the assurance and underwriting of security solutions.
• Manage security activities across development, testing and manufacturing environments.
• Advise engineering teams on platform lockdown, secure configuration and hardening requirements.
• Lead through-life product security activities, including vulnerability management, patch management and obsolescence planning.

Essential Skills & Experience

• Proven experience developing bespoke product-based security solutions for military, Defence or commercial products and systems.
• Strong practical knowledge of current and legacy UK, EU and NATO information security standards and frameworks.
• Experience working with frameworks and standards including UK MOD Secure by Design
• Practical experience producing technical security assurance documentation, such as Key Management Plans, Security Testing Instructions, Security Operating Procedures and Security Cases.
• Knowledge of modern cryptographic technologies and key management systems.
• Understanding of Model-Based Systems Engineering (MBSE) and how Product Security integrates into the systems engineering lifecycle.