Lead Product Security Engineer

Matchtech; Luton; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

A leading defence technology company is seeking a skilled Security Engineer for a 12-month contract. You will manage product security through the entire lifecycle, with responsibilities ranging from defining security measures to leading incident response efforts. This hybrid role offers flexibility while requiring some on-site presence for collaboration.

Qualifications

• Background in securing defence or commercial systems.
• Certified security professional (e.g. CISSP, NCSC Certified Professional).
• Familiar with UK/NATO IA standards.

Responsibilities

• Lead the definition and implementation of product security measures.
• Develop Security Management Plans and risk assessments.
• Prepare security documentation including Protection Profiles.

Skills

Communication

Leadership

Collaboration

Education

Degree in engineering, computer science, or related field

Job description

Location: Luton (Hybrid working – est 1–2 days per week onsite)

Duration: 12 month initial contract

Rate: 91ph UMB (Inside IR35)

Job Title: Security Engineer – Defence & Government Systems

Overview:

A leading defence technology company is seeking a skilled Security Engineer to develop and manage product security for high–integrity systems. You will oversee security throughout the product lifecycle–from concept to maintenance–ensuring alignment with customer and regulatory requirements.

Key Responsibilities:

• Lead the definition, implementation, and governance of product security measures across the entire system lifecycle.
• Develop Security Management Plans, risk assessments, and mitigation strategies.
• Define and review security requirements for product teams.
• Support system accreditation, liaising with security accreditors and assurance teams.
• Prepare security documentation including Protection Profiles, Security Targets, and TEMPEST Control Plans.
• Assist with platform lockdown, penetration testing, and vulnerability management.
• Lead incident response efforts and support product security training.

Skills & Experience:

• Background in securing defence or commercial systems.
• Degree in engineering, computer science, or related field.
• Certified security professional (e.g. CISSP, NCSC Certified Professional).
• Familiar with UK/NATO IA standards (ISO 27000, NIST SP800, JSP440, etc.).
• Experience with accreditation, security evaluation, and cryptographic systems.
• Strong communication, leadership, and collaboration skills.
• Eligible for SC clearance (UK–only caveat).

Desirable:

• DV clearance
• Understanding of quantum cryptography
• Familiarity with NATO security policies and advisory boards

Working Environment:

Primarily desk–based with some UK/international travel. Flexible remote working is available, though some on–site presence is required.