Lead Product Security Engineer in Luton, Bedfordshire

Energy Jobline CVL; Luton; On-site; GBP 180,000 - 200,000; Full time

Job summary

Energy Jobline CVL in Luton is seeking Lead Product Security Engineers to support a defence client through all stages of the product lifecycle. The role reports to the Head of Engineering Projects and requires delivering security across design, development and maintenance.

The position is 3 days on-site per week, with a 6-month initial contract and a focus on bespoke security solutions, MBSE, and compliance with UK/NATO standards.

Qualifications

• Experience in bespoke product-based security solutions.
• Knowledge of UK/EU/NATO information security standards and frameworks.
• Experience producing technical assurance documentation.
• Knowledge of cryptographic technologies and key management systems.
• Understanding of MBSE.

Responsibilities

• Develop and maintain bespoke security management systems for Defence and Government customers.
• Undertake security risk assessments and prepare security risk mitigation plans.
• Derive security requirements and work closely with product development teams to design, implement, and maintain appropriate security controls.
• Produce Security Management Plans and work package descriptions.
• Liaise with customer security assurance authorities to ensure product compliance with security policies.
• Advise development teams on suitable platform lockdown and configurations, and support Penetration test activities.
• Manage security incident teams during incidents/crisis situations.
• Deliver product security training to project engineering teams.

Skills

Security engineering

Communication skills

MBSE

SC clearance

Education

Graduate degree in engineering/computing/science

Job description

Location: Luton (3 days per week onsite)

Duration: 6 month initial contract

Rate: £91.70ph UMB (Inside IR35)

Role Details

We are looking for Lead Product Security Engineers to support our defence client in Luton. The successful candidates will report to the Head of Engineering Projects and be responsible for all security aspects of product design, development, verification, and maintenance through all phases of the product lifecycle.

Key Responsibilities

• Develop and maintain bespoke capability security management systems for Defence and Government customers.
• Undertake security risk assessments and prepare security risk mitigation plans.
• Derive security requirements and work closely with product development teams to design, implement, and maintain appropriate security controls.
• Produce Security Management Plans and work package descriptions.
• Liaise with customer security assurance authorities to ensure product compliance with security policies.
• Advise development teams on suitable platform lockdown and configurations, and support Penetration test activities.
• Manage security incident teams during incidents/crisis situations.
• Deliver product security training to project engineering teams.

Job Requirements

• Experience in the development of bespoke product-based security solutions.
• Graduate degree in relevant engineering, computing, or related scientific discipline.
• Membership of an NCSC recognised professional security body (e.g. CIISec, ISC2, ISACA).
• Knowledge of UK/EU/NATO information security standards and frameworks.
• Practical experience of producing technical assurance documentation.
• Knowledge of current cryptographic technologies and key management systems.
• Understanding of Model Based System Engineering (MBSE).
• Excellent verbal and written communication skills.
• Ability to obtain SC clearance with UK-eyes only caveat.

Desirable

• DV Clearance.
• Experience with Common Criteria security evaluation techniques.
• Knowledge of Quantum Cryptography and Quantum Key management.
• Familiarity with existing threat intelligence sources.
• Understanding of NATO security policy, risk management, and Accreditation.

Intrinsic Factors

This is a desk-based role using display screen equipment, working full-time hours often in a demanding environment, with occasional travel throughout the UK and abroad. While there is an option for some remote work, on-site attendance will be required for face-to-face meetings and when handling sensitive material.