Lead Product Security Engineer – Luton Onsite 3x/Week

Matchtech; Luton; On-site; GBP 110,000 - 165,000; Full time

Job summary

Matchtech is seeking Lead Product Security Engineers to support a defence client in Luton. You will oversee all security aspects of product design, development, verification and maintenance across the lifecycle, reporting to the Head of Engineering Projects.

Responsibilities include developing bespoke security management systems, conducting risk assessments, deriving requirements, and liaising with security authorities to ensure compliance.

Qualifications

• Graduate degree in engineering, computing or related science.
• Membership of CIISec, ISC2 or ISACA.
• Knowledge of UK/EU/NATO information security standards.
• Experience producing technical assurance documentation.
• Knowledge of cryptographic technologies and key management.
• Understanding MBSE.
• Ability to obtain SC clearance (UK Eyes).

Responsibilities

• Develop and maintain bespoke security management systems for Defence and Government customers.
• Undertake security risk assessments and prepare risk mitigation plans.
• Derive security requirements with product teams to design security controls.
• Produce Security Management Plans and work package descriptions.
• Liaise with customer security authorities to ensure policy compliance.
• Advise on platform lockdown and configurations; support penetration testing.
• Manage security incident teams during incidents and crises.
• Deliver product security training to project teams.

Skills

Security engineering

Risk assessment

MBSE

Security requirements

Cryptography

Communication

Education

Graduate degree in engineering/computing

Tools

Security management frameworks

Job description

Matchtech is seeking Lead Product Security Engineers to support a defence client in Luton. You will oversee all security aspects of product design, development, verification and maintenance across the lifecycle, reporting to the Head of Engineering Projects.

Responsibilities include developing bespoke security management systems, conducting risk assessments, deriving requirements, and liaising with security authorities to ensure compliance.