Product Security Architect

JR United Kingdom; Bath; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading Defence and Aerospace company in Bath seeks a Product Security Architect to oversee security requirements integration throughout the product lifecycle. You will develop risk management strategies, collaborate with teams on Secure by Design principles, and mitigate vulnerabilities in products. This role is ideal for candidates looking to grow in a dynamic industry with prominent security standards.

Qualifications

• Experience in Security Infrastructure and Secure by Design is required.
• Knowledge of HMG standards and security frameworks such as ISO/IEC 27001.
• Experience in performing risk assessments and threat modelling.

Responsibilities

• Identify security requirements and ensure integration of security controls.
• Develop and implement risk management strategies.
• Collaborate with development teams to adopt Secure by Design principles.

Skills

Security Infrastructure

Secure by Design

Risk Management

Threat Modelling

Security Assessments

Security Vulnerability Management

Security Frameworks

Job description

Social network you want to login/join with:

Do you have experience in Security Infrastructure?

Do you have experience in Secure by Design?

Do you want to work with an industry-leading company?

If your answers are yes to these, then this could be the role for you!

As the Product Security Architect, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry!

Some of what you will be involved in:

• Identify security requirements and ensure the integration of security controls during the product development lifecycle
• Develop and implement risk management strategies
• Perform security threat modelling and risk assessments applying security controls to mitigate any threats identified
• Collaborate with the development teams to ensure the adoption of Secure by Design principles
• Identify security risks that arise from potential solution architectures, advising and assuring alternate solutions or counter-measures to mitigate identified information risks.
• Collaborate with the product development teams to integrate security best practices ensuring Secure by Design
• Identify and mitigate security vulnerabilities and risks in products
• Develop and maintain security guidelines, documentation, and training materials
• Participate in incident response and remediation efforts for security breaches affecting products
• Knowledge of HMG standards (including MOD-specific JSP, Def Stan 05-138, Def Stan 05-139)
• An understanding of MOD ISN 23/09 Secure by Design
• Knowledge of security frameworks, such as ISO/IEC 27001, NIST 800-30, NIST 800-53 or OWASP
• Working with risk management frameworks and methodologies (e.g., ISO 27001/2, ISO27005/31000, NIST 800-30, NIST 800-53)

If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further!