Principal Product Security Practitioner

baesystems; Barrow-in-Furness; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Relocation support

Job summary

BAE Systems in Barrow-in-Furness seeks a Principal Product Security Practitioner to lead security across submarine system development and delivery. You will apply your subject matter expertise to ensure cyber resilience in hostile environments, spanning embedded hardware, IT networks and OT systems.

The role requires advising on secure development practices, managing lifecycle security risks, and collaborating with safety engineers to ensure risk-aware interfaces.

Qualifications

• Degree or equivalent in STEM, Information Security, Cyber Security, or related discipline.
• Experience in Product Security, Information Assurance or Cyber Security in Critical National Infrastructure.
• Recognised Industry Security Qualifications such as CCP, CISSP, CISM (or able to achieve).
• Able to influence senior stakeholders by bridging technical engineering and cyber risk.

Responsibilities

• Assess product security across the lifecycle, identifying threats and advising secure development practices.
• Manage security risks and cyber resilience between IT & OT product families.
• Represent Product Security at Design Reviews with risk mitigation options to gain buy-in.
• Develop and maintain security architecture including requirements derivation and definition.
• Produce security deliverables: Security Strategies, Threat Assessments and Security Case artefacts.
• Collaborate with Safety Engineering to align cyber risk with safety considerations.

Skills

Product Security

Stakeholder influence

Cyber Security

Information Assurance

Education

Relevant STEM/InfoSec degree

Job description

Job Title: Principal Product Security Practitioner

Location: Barrow-In-Furness

Grade: S5

Referral bonus: £5000

You're expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development. We know there may be exceptional individual circumstances that impact this, in the first instance please discuss this with your line manager.

If you don't feel you can talk to your line manager, you can contact your HRBP.

PLEASE NOTE: Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.

What you will be doing:

Defence platforms operate in the world's most hostile, high consequence environments. Their survival depends on uncompromising cyber resilience across embedded hardware, tactical networks (IT) and mission critical systems (OT). The successful candidate will work as a valued member of an engineering delivery team, applying their subject matter expertise to focus on ensuring the next generation of submarine systems are developed, built and delivered to be appropriately secure and resilient within their operational environment.

Core duties:

• Gain sufficient understanding of a system, its concept of use and architectures to provide an accurate assessment of Product Security in terms of possible threats, potential avenues of attack and to advise on the application of secure development practices
• Your role will include the identification, analysis, and evaluation of security risks throughout the product lifecycle. Managing the Security interface between IT & OT Product families, to ensure cyber resilience of the platform
• Represent Product Security at Design Reviews, presenting risks and mitigation options to influence stakeholders to achieve agreement and buy-in
• Developing and maintaining security architecture including requirement derivation and definition
• Produce and support key Product Security deliverables, including Security Strategies, Threat assessments and Security Case artefact
• Collaborate with other engineering disciplines such as Safety Engineering to ensure and assure that the cyber interface is understood and risk aware

Essential Skills:

• Degree or equivalent experience in a relevant STEM, Information Security, Cyber Security or related discipline
• Experience of Product Security, Information Assurance or Cyber Security within Critical National Infrastructures such as Defence/Financial services
• Recognised Industry Security Qualifications for example CCP, CISSP, CISM or similar (or able to achieve)
• Able to support and influence senior stakeholders by bridging technical engineering and cyber risk to support product outcomes and decisions

The Product Security Team:

As a member of the Product Security Team, you will be responsible for managing product security and information risk across the lifecycle of BAE Systems' complex products and systems. You will provide specialist security expertise to engineering and project teams, ensuring that security risks are identified, assessed and appropriately managed from system design through delivery, operation and through-life support. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria.

A place where everyone can thrive:

We're committed to building an inclusive workplace where everyone feels valued and supported. We welcome applications from all suitably qualified people and encourage discussion of reasonable adjustments where needed.

We welcome applications from all suitably qualified people, who are BAE Systems employees and have been in their current role for 12 months or longer.

Please be aware that many roles at BAE Systems are subject to security and export control restrictions. Applicants must meet Baseline Personnel Security Standard, and many roles require higher levels of National Security Vetting, including 5-10 years continuous UK residency depending on the role.

Why BAE Systems?

Here you'll build a career with purpose and limitless possibilities. Lifelong learning, meaningful work, and a supportive culture enable you to grow with confidence. You'll be recognised for your contribution and supported with rewards that matter most to you.