Lead Product Security Engineer

Defence iQ; Luton; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading defence technology company is looking for a Security Engineer to oversee product security for high-integrity systems. This involves managing the security lifecycle, ensuring compliance with regulatory requirements, and preparing necessary documentation. Candidates should have a strong background in securing defence systems, related degrees, and certifications.

Qualifications

• Strong background in securing defence systems or commercial systems.
• Certified security professional (e.g. CISSP, NCSC Certified Professional).
• Familiar with UK/NATO IA standards (ISO 27000, NIST SP800, JSP440).

Responsibilities

• Lead definition and governance of product security measures.
• Develop Security Management Plans and risk assessments.
• Assist with platform lockdown and penetration testing.

Skills

Security Management

Communication

Leadership

Collaboration

Risk Assessment

Education

Degree in engineering, computer science, or related field

Tools

Cryptographic systems

Job description

Location: Luton (Hybrid working - est 1-2 days per week onsite)

Duration: 12 month initial contract

Rate: £91ph UMB (Inside IR35)

Job Title: Security Engineer - Defence & Government Systems

Overview:

A leading defence technology company is seeking a skilled Security Engineer to develop and manage product security for high-integrity systems. You will oversee security throughout the product lifecycle-from concept to maintenance-ensuring alignment with customer and regulatory requirements.

Key Responsibilities:

• Lead the definition, implementation, and governance of product security measures across the entire system lifecycle.
• Develop Security Management Plans, risk assessments, and mitigation strategies.
• Define and review security requirements for product teams.
• Support system accreditation, liaising with security accreditors and assurance teams.
• Prepare security documentation including Protection Profiles, Security Targets, and TEMPEST Control Plans.
• Assist with platform lockdown, penetration testing, and vulnerability management.
• Lead incident response efforts and support product security training.

Skills & Experience:

• Background in securing defence or commercial systems.
• Degree in engineering, computer science, or related field.
• Certified security professional (e.g. CISSP, NCSC Certified Professional).
• Familiar with UK/NATO IA standards (ISO 27000, NIST SP800, JSP440, etc.).
• Experience with accreditation, security evaluation, and cryptographic systems.
• Strong communication, leadership, and collaboration skills.
• Eligible for SC clearance (UK-only caveat).

Desirable:

• DV clearance
• Understanding of quantum cryptography
• Familiarity with NATO security policies and advisory boards

Working Environment:

Primarily desk-based with some UK/international travel. Flexible remote working is available, though some on-site presence is required.