Lead Product Security Engineer

TN United Kingdom; Basildon; On-site; GBP 55,000 - 95,000; Full time

Job summary

An established industry player is seeking a Lead Product Security Engineer to enhance security measures across innovative products. This pivotal role involves collaborating with engineering teams to ensure compliance with security policies while managing risks throughout the product lifecycle. The ideal candidate will have a strong background in security management systems, experience in military or commercial product security, and excellent communication skills to engage with stakeholders effectively. Join a forward-thinking company that values learning and development, offering a comprehensive benefits package and flexible working arrangements to support your work-life balance.

Benefits

Private Healthcare

Dental Schemes

Pension Schemes

Wellbeing Support

Training Opportunities

Generous Holiday Entitlement

Technology Allowances

Incentive Schemes

Management Bonuses

Qualifications

• Experience in developing security solutions for military or commercial products.
• Knowledge of UK/NATO security standards and procedures.

Responsibilities

• Lead security aspects of product design, development, and maintenance.
• Manage security throughout the product's lifecycle, including vulnerability management.

Skills

Product Security Management

Security Risk Assessment

Security Documentation

Communication Skills

Security Incident Management

Education

NCSC Certified Professional

Relevant Security Qualification

Tools

Model Based System Engineering (MBSE)

Cryptography Technologies

Job description

Social network you want to login/join with:

Lead Product Security Engineer, Basildon

col-narrow-left

Client:

Leonardo

Location:

Basildon, United Kingdom

Job Category:

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

791efa3a81ff

Job Views:

11

Posted:

26.04.2025

Expiry Date:

10.06.2025

col-wide

Job Description:

Job Description:

At Leonardo, we have a fantastic opportunity for a Lead Product Security Engineer to join our team within the Customer Support and Service Solutions (CS3) line of business. CS3 operates across the UK, providing innovative and invaluable support solutions to our customers. We help to ensure the availability of front-line capability wherever and whenever required.

We are looking for an experienced security engineer with expertise in developing and maintaining product security management systems for defence and government customers. Within CS3, the term 'product' can include both in-service equipment and the support solutions/services provided to customers, which are also developed. The Lead Product Security Engineer will be responsible for all security aspects of product design, development, verification, and maintenance throughout the product lifecycle, including security planning, assessment, risk mitigation, and accreditation activities. The role also involves working closely with product development teams to design, implement, and maintain appropriate security controls, and providing technical advice within the area of product security.

• Work with customer security accreditors and SMEs, as well as project engineering teams, to ensure product compliance with security policies and manage residual security risks.
• Produce Security Management Plans, work package descriptions, and cost estimates supporting bids and proposals.
• Undertake security risk assessments, create risk mitigation plans, perform gap analysis, and prepare security documentation for accreditation.
• Define product security requirements, advise on implementation standards, oversee development activities.
• Liaise with Security Accreditors and Security Assurance Coordinators for security accreditation.
• Prepare Protection Profiles, Security Targets, Evaluation Management Plans, and liaise with evaluation teams.
• Advise on platform lockdowns, configurations, and support penetration testing activities, analyzing results and planning remediations.
• Manage security throughout the product's lifecycle, including vulnerability and patch management.
• Lead security incident management during crises in collaboration with the Chief Product Security Engineer.
• Support the review and improvement of security policies, processes, and practices.
• Deliver security training to engineering teams.
• Experience in developing security solutions for military or commercial products.
• Registered NCSC certified professional at senior level or recognized equivalent qualification.
• Knowledge of UK/NATO security standards, procedures, and systems, including relevant standards and guidance.
• Experience in producing security accreditation documentation and evaluation techniques.
• Knowledge of cryptography and key management technologies.
• Familiarity with Model Based System Engineering (MBSE).
• Understanding of security controls for operating systems, firmware, and software.
• Awareness of emerging technologies like cloud, virtualization, and web-based systems.
• Excellent communication skills to interact with stakeholders at all levels.
• Positive attitude and ability to influence and motivate others.
• Experience with Enterprise Security Architectures (SABSA, MODAF).

Security Clearance:

Required

Life at Leonardo:

Leonardo offers a comprehensive benefits package, a focus on learning and development, and flexible working arrangements to support work-life balance. Benefits include private healthcare, dental schemes, workplace ISA, green car schemes, technology and lifestyle allowances, generous holiday entitlement, pension schemes, wellbeing support, discounts, and training opportunities. We also have incentive schemes and management bonuses to reward performance.