Lead Product Security Engineer – UK Clearance

Advanced Resource Managers Ltd; Luton; On-site; GBP 77,000 - 128,000; Part time

Job summary

Advanced Resource Managers Ltd in Luton is seeking a Product Security Engineer to own security across the product lifecycle, from design through maintenance, with emphasis on risk assessments and security controls.

You will work with product development teams to derive security requirements, produce security artefacts and collaborate with security authorities to demonstrate compliance; experience with UK/NATO standards and MBSE is highly regarded.

Qualifications

• Graduate degree in engineering, computing or related field.
• Evidence of further professional study.
• Membership of an NCSC-recognised security body (CIISec/ISC2/ISACA).
• Knowledge of UK/EU/NATO information security standards and frameworks (e.g. UK MOD Secure by Design, ISO27001, NIST SP800).
• Experience producing technical assurance docs (Key Management Plans, Security SOPs, Security Cases).
• Knowledge of cryptographic technologies and key management systems.
• Understanding MBSE and how product security inputs into processes.
• Knowledge of product-specific OS, firmware and software security controls.
• Knowledge of Quantum Cryptography & Quantum Key management.
• Experience or knowledge of threat intelligence sources.
• Knowledge of NATO security policy, risk management and Accreditation.

Responsibilities

• Produce Security Management Plans, work package descriptions and cost estimates for bids and proposals.
• Undertaking security risk assessments, risk mitigation plans, gap analysis and security management documentation for system assurance.
• Define product security requirements and advise development teams on bespoke implementations for product security controls.
• Liaison with internal and external security assurance authorities to demonstrate product compliance.
• Drive collaboration with external security authorities such as the NCSC to underpin security solutions.
• Understand and manage security activities within development, testing and manufacturing environments.
• Advise on platform lockdown/configurations and support penetration testing; analyse results and plan remediations.
• Identify and drive life-cycle security management including obsolescence planning and patch management.
• Lead security incident management with Head of Product Security for EW/FCA.
• Review, maintain and participate in corporate product security policies.
• Deliver product security training to project engineering teams.

Skills

Product security engineering

Security risk assessment

Security documentation

MBSE

Cryptography knowledge

NCSC frameworks knowledge

Education

Graduate degree in engineering or computing

Membership in CIISec/ISC2/ISACA

Job description

Advanced Resource Managers Ltd in Luton is seeking a Product Security Engineer to own security across the product lifecycle, from design through maintenance, with emphasis on risk assessments and security controls.

You will work with product development teams to derive security requirements, produce security artefacts and collaborate with security authorities to demonstrate compliance; experience with UK/NATO standards and MBSE is highly regarded.