Lead Product Security Engineer

ARM; Caddington; On-site; GBP 190,000 - 195,000; Full time

Job summary

ARM in Luton is seeking a Product Security Engineer to own security across the product lifecycle, from design through verification and maintenance, including security risk assessments and defining security controls.

This 6-month contract requires a high level of UK security clearance and collaboration with product teams to ensure robust security artefacts and compliance with UK/NATO frameworks.

Qualifications

• Graduate degree in engineering, computing or related field.
• Membership of an NCSC recognised security body (CIISec, ISC2, ISACA).
• Knowledge of UK/EU/NATO security standards and frameworks.
• Experience producing security documentation (KMP, SIPS, SOPs, Security Cases).

Responsibilities

• Produce Security Management Plans and cost estimates.
• Carry out security risk assessments and mitigation plans.
• Define product security requirements for development teams.
• Interface with internal/external security authorities for compliance.
• Collaborate with external authorities like NCSC to underpin security solutions.
• Oversee security activities in development, testing and manufacturing environments.
• Advise on platform lockdowns and security configurations; support pentests and remediation.
• Manage life-cycle security including vulnerability and patch management.
• Lead security incident management with senior stakeholders.
• Review and maintain corporate product security policies.
• Deliver product security training to project teams.

Skills

Security risk assessment

Product security design

Security documentation

Incident management

Stakeholder liaison

Education

Graduate degree in engineering or related field

NCSC security body membership

Job description

ARM in Luton is seeking a Product Security Engineer to own security across the product lifecycle, from design through verification and maintenance, including security risk assessments and defining security controls.

This 6-month contract requires a high level of UK security clearance and collaboration with product teams to ensure robust security artefacts and compliance with UK/NATO frameworks.