Lead Product Security Engineer

ZipRecruiter; Luton; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading defence technology company seeks a skilled Security Engineer to manage product security for high-integrity systems. The role involves leading security measures throughout the product lifecycle and ensuring compliance with standards. Ideal candidates will have a degree in relevant fields and possess security certifications, with potential for UK-based travel.

Qualifications

• Background in securing defence or commercial systems.
• Certified security professional (e.g., CISSP, NCSC Certified Professional).
• Familiar with UK/NATO IA standards (ISO 27000, NIST SP800, JSP440).

Responsibilities

• Lead the definition, implementation, and governance of product security measures.
• Develop Security Management Plans and risk assessments.
• Prepare security documentation including Protection Profiles and Security Targets.

Skills

Security Management

Risk Assessment

Collaboration

Communication

Leadership

Education

Degree in engineering, computer science, or related field

Job description

Job Description

Location: Luton (Hybrid working - est 1-2 days per week onsite)

Duration: 12 month initial contract

Rate: £91ph UMB (Inside IR35)

Job Title: Security Engineer - Defence & Government Systems

Overview:

A leading defence technology company is seeking a skilled Security Engineer to develop and manage product security for high-integrity systems. You will oversee security throughout the product lifecycle—from concept to maintenance—ensuring alignment with customer and regulatory requirements.

Key Responsibilities:

• Lead the definition, implementation, and governance of product security measures across the entire system lifecycle.
• Develop Security Management Plans, risk assessments, and mitigation strategies.
• Define and review security requirements for product teams.
• Support system accreditation, liaising with security accreditors and assurance teams.
• Prepare security documentation including Protection Profiles, Security Targets, and TEMPEST Control Plans.
• Assist with platform lockdown, penetration testing, and vulnerability management.
• Lead incident response efforts and support product security training.

Skills & Experience:

• Background in securing defence or commercial systems.
• Degree in engineering, computer science, or related field.
• Certified security professional (e.g., CISSP, NCSC Certified Professional).
• Familiar with UK/NATO IA standards (ISO 27000, NIST SP800, JSP440, etc.).
• Experience with accreditation, security evaluation, and cryptographic systems.
• Strong communication, leadership, and collaboration skills.
• Eligible for SC clearance (UK-only caveat).

Desirable: DV clearance, understanding of quantum cryptography, familiarity with NATO security policies and advisory boards.

Working Environment:

Primarily desk-based with some UK/international travel. Flexible remote working is available, though some on-site presence is required.