Lead Product Security Engineer

Matchtech; Luton; On-site; GBP 110,000 - 165,000; Full time

Job summary

Matchtech is seeking Lead Product Security Engineers to support a defence client in Luton. You will oversee all security aspects of product design, development, verification and maintenance across the lifecycle, reporting to the Head of Engineering Projects.

Responsibilities include developing bespoke security management systems, conducting risk assessments, deriving requirements, and liaising with security authorities to ensure compliance.

Qualifications

• Graduate degree in engineering, computing or related science.
• Membership of CIISec, ISC2 or ISACA.
• Knowledge of UK/EU/NATO information security standards.
• Experience producing technical assurance documentation.
• Knowledge of cryptographic technologies and key management.
• Understanding MBSE.
• Ability to obtain SC clearance (UK Eyes).

Responsibilities

• Develop and maintain bespoke security management systems for Defence and Government customers.
• Undertake security risk assessments and prepare risk mitigation plans.
• Derive security requirements with product teams to design security controls.
• Produce Security Management Plans and work package descriptions.
• Liaise with customer security authorities to ensure policy compliance.
• Advise on platform lockdown and configurations; support penetration testing.
• Manage security incident teams during incidents and crises.
• Deliver product security training to project teams.

Skills

Security engineering

Risk assessment

MBSE

Security requirements

Cryptography

Communication

Education

Graduate degree in engineering/computing

Tools

Security management frameworks

Job description

Location: Luton (3 days per week onsite)

Duration: 6 month initial contract

Rate: £91.70ph UMB (Inside IR35)

Role details:

We are looking for Lead Product Security Engineers to support our defence client in Luton. The successful candidates will report to the Head of Engineering Projects and be responsible for all security aspects of product design, development, verification, and maintenance through all phases of the product lifecycle.

Key Responsibilities:

• Develop and maintain bespoke capability security management systems for Defence and Government customers.
• Undertake security risk assessments and prepare security risk mitigation plans.
• Derive security requirements and work closely with product development teams to design, implement, and maintain appropriate security controls.
• Produce Security Management Plans and work package descriptions.
• Liaise with customer security assurance authorities to ensure product compliance with security policies.
• Advise development teams on suitable platform lockdown and configurations, and support Penetration test activities.
• Manage security incident teams during incidents/crisis situations.
• Deliver product security training to project engineering teams.

Job Requirements:

• Experience in the development of bespoke product-based security solutions.
• Graduate degree in relevant engineering, computing, or related scientific discipline.
• Membership of an NCSC recognised professional security body (e.g. CIISec, ISC2, ISACA).
• Knowledge of UK/EU/NATO information security standards and frameworks.
• Practical experience of producing technical assurance documentation.
• Knowledge of current cryptographic technologies and key management systems.
• Understanding of Model Based System Engineering (MBSE).
• Excellent verbal and written communication skills.
• Ability to obtain SC clearance with UK-eyes only caveat.

Desirable:

• DV Clearance.
• Experience with Common Criteria security evaluation techniques.
• Knowledge of Quantum Cryptography and Quantum Key management.
• Familiarity with existing threat intelligence sources.
• Understanding of NATO security policy, risk management, and Accreditation.

Intrinsic Factors:

This is a desk-based role using display screen equipment, working full-time hours often in a demanding environment, with occasional travel throughout the UK and abroad. While there is an option for some remote work, on-site attendance will be required for face-to-face meetings and when handling sensitive material.