Lead Security Engineer (contract)

JR United Kingdom; Bedford; On-site; GBP 60,000 - 85,000; Full time

Job summary

A leading defense contractor is seeking a Lead Security Engineer in Bedford. The position involves overseeing security aspects in product design and development for defense and government clients. Ideal candidates will have extensive experience in security solutions, pertinent certifications, and a strong understanding of security management principles. Join a pivotal role in ensuring product integrity and compliance within a high-stakes environment.

Qualifications

• Experience in security solutions development for military or commercial systems.
• Senior-level NCSC certification or recognized equivalent (e.g., ISC2 CISSP).
• Knowledge of UK/NATO information assurance standards.

Responsibilities

• Producing Security Management Plans and cost estimates for bids.
• Conducting security risk assessments and developing mitigation plans.
• Managing security through-life support, including vulnerability and patch management.

Skills

Security Solutions Development

Security Risk Assessments

Security Controls Implementation

Incident Management

Vulnerability Management

Education

NCSC certification (or equivalent)

Job description

Lead Security Engineer (contract) - Bedford

Client: CBSbutler

Location: Bedford, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

We are seeking an experienced Lead Security Engineer with expertise in developing and maintaining product security management systems for defence and government customers.

This position reports to the Head of Engineering Projects and is responsible for all security aspects of product design, development, verification, and maintenance throughout the product lifecycle.

The role involves conducting security risk assessments, preparing mitigation plans, defining security requirements, and working with development teams to implement security controls and produce security artefacts.

Key Responsibilities:

• Producing Security Management Plans, work package descriptions, and cost estimates for bids and proposals.
• Conducting security risk assessments, developing mitigation plans, and supporting system accreditation activities.
• Defining security requirements and advising on implementation standards.
• Liaising with Security Accreditors and Assurance Coordinators.
• Preparing Protection Profiles, Security Targets, and Evaluation Management Plans.
• Developing TEMPEST Control Plans and advising on platform security configurations.
• Supporting penetration testing and analyzing results for remedial actions.
• Managing security through-life support, including vulnerability and patch management.
• Leading security incident management in crisis situations.

Qualifications and Experience:

• Experience in security solutions development for military or commercial systems.
• Senior-level NCSC certification or recognized equivalent (e.g., ISC2 CISSP).
• Knowledge of UK/NATO information assurance standards and related frameworks.
• Experience in producing security accreditation documentation.
• Familiarity with NCSC and Common Criteria evaluation techniques.
• Knowledge of cryptography and key management systems.
• Understanding of Model-Based Systems Engineering (MBSE).