Lead Product Security Engineer

Lead Product Security Engineer Location: Luton – hybrid working

Rate: £92.50 per hour Umbrella

Contract: 6 months

Clearance: Active SC required; DV desirable

Nationality: Sole British nationals only due to UK Eyes Only requirements

We are recruiting for experienced Lead Product Security Engineers to support a major organisation within the UK defence sector.

The role will take responsibility for security aspects of complex defence products and systems throughout the full engineering lifecycle, from design and development through to verification, maintenance and through-life support.

Working closely with product development teams, engineering SMEs, risk owners and security assurance authorities, you will lead security risk and assurance activities, derive product security requirements and ensure appropriate security controls are incorporated into product design.

This is a Product/Systems Security Engineering role rather than a corporate IT or enterprise cyber security position.

Key Responsibilities Undertake security risk assessments and develop risk mitigation plans and gap analyses.

Produce Security Management Plans and security documentation supporting product development and assurance.

Define and derive product security requirements , working directly with engineering teams on their implementation.

Provide security advice throughout product design, development, testing and manufacturing.

Produce technical assurance artefacts including Security Cases, Security Operating Procedures, Testing Security Instructions and Key Management Plans .

Liaise with internal and external security assurance authorities to demonstrate product compliance.

Apply MOD Secure by Design principles throughout the engineering lifecycle.

Work with external security authorities, including the NCSC, to support assurance of security solutions.

Advise engineering teams on platform lockdown, configuration and appropriate product security controls.

Support penetration testing, analyse findings and develop appropriate remediation plans.

Manage through-life security ...