Product Security Architect

ZipRecruiter; Bristol; On-site; GBP 80,000 - 92,000; Full time

Job summary

A leading company in Defence and Aerospace is seeking a Product Security Architect in Bristol. This permanent role offers a competitive salary of circa £80,000. The successful candidate will identify security requirements, develop risk management strategies, and collaborate with product teams to ensure security best practices are integrated throughout the product development lifecycle.

Qualifications

• Experience in Security Infrastructure and Secure by Design.
• Knowledge of HMG standards and security frameworks.

Responsibilities

• Identify security requirements and integrate security controls.
• Develop risk management strategies and perform security assessments.
• Collaborate with teams to ensure Secure by Design principles.

Skills

Security Infrastructure

Secure by Design

Risk Management

Security Threat Modelling

Tools

ISO/IEC 27001

NIST 800-30

NIST 800-53

OWASP

Job description

Job Description

Product Security Architect

Permanent role

Based in Bristol

Offering circa £80,000

Do you have experience in Security Infrastructure?

Do you have experience in Secure by Design?

Do you want to work with an industry-leading company?

If your answers are yes to these, then this could be the role for you!

As the Product Security Architect, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry!

Some of what you will be involved in:

• Identify security requirements and ensure the integration of security controls during the product development lifecycle
• Develop and implement risk management strategies
• Perform security threat modelling and risk assessments applying security controls to mitigate any threats identified
• Collaborate with the development teams to ensure the adoption of Secure by Design principles
• Identify security risks that arise from potential solution architectures, advising and assuring alternate solutions or counter-measures to mitigate identified information risks.
• Collaborate with the product development teams to integrate security best practices ensuring Secure by Design
• Identify and mitigate security vulnerabilities and risks in products
• Develop and maintain security guidelines, documentation, and training materials
• Participate in incident response and remediation efforts for security breaches affecting products

Your skillset may include:

• Knowledge of HMG standards (including MOD-specific JSP, Def Stan 05-138, Def Stan 05-139)
• An understanding of MOD ISN 23/09 Secure by Design
• Knowledge of security frameworks, such as ISO/IEC 27001, NIST 800-30, NIST 800-53 or OWASP
• Working with risk management frameworks and methodologies (e.g., ISO 27001/2, ISO27005/31000, NIST 800-30, NIST 800-53)

If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further!