Product Security Architect

Advanced Resource Managers; Bristol; On-site; GBP 80,000 - 100,000; Full time

Job summary

An established industry player is seeking a Product Security Architect to join their dynamic team in Bristol. This exciting role involves identifying security requirements, integrating security controls, and collaborating with development teams to ensure Secure by Design principles are adopted. You will have the opportunity to work with cutting-edge technologies in the Defence and Aerospace sector, contributing to the development of secure products and enhancing your skills within a supportive environment. If you are passionate about security and want to make a significant impact, this is the perfect opportunity for you!

Qualifications

• Experience in Security Infrastructure and Secure by Design principles.
• Knowledge of security frameworks and risk management methodologies.

Responsibilities

• Identify security requirements and integrate security controls during product development.
• Develop risk management strategies and perform security threat modelling.

Skills

Security Infrastructure

Secure by Design

Risk Management

Security Threat Modelling

Security Controls

Incident Response

Tools

ISO/IEC 27001

NIST 800-30

NIST 800-53

OWASP

Job description

Product Security Architect

Permanent role

Based in Bristol

Do you have experience in Security Infrastructure?

Do you have experience in Secure by Design?

Do you want to work with an industry-leading company?

If your answers are yes to these, then this could be the role for you!

As the Product Security Architect, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry!

Some of what you will be involved in:

1. Identify security requirements and ensure the integration of security controls during the product development lifecycle
2. Develop and implement risk management strategies
3. Perform security threat modelling and risk assessments applying security controls to mitigate any threats identified
4. Collaborate with the development teams to ensure the adoption of Secure by Design principles
5. Identify security risks that arise from potential solution architectures, advising and assuring alternate solutions or counter-measures to mitigate identified information risks.
6. Collaborate with the product development teams to integrate security best practices ensuring Secure by Design
7. Identify and mitigate security vulnerabilities and risks in products
8. Develop and maintain security guidelines, documentation, and training materials
9. Participate in incident response and remediation efforts for security breaches affecting products
10. Knowledge of HMG standards (including MOD-specific JSP, Def Stan 05-138, Def Stan 05-139)
11. An understanding of MOD ISN 23/09 Secure by Design
12. Knowledge of security frameworks, such as ISO/IEC 27001, NIST 800-30, NIST 800-53 or OWASP
13. Working with risk management frameworks and methodologies (e.g., ISO 27001/2, ISO27005/31000, NIST 800-30, NIST 800-53)

If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further!

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Engineering and Information Technology

Industries

Defense and Space Manufacturing and Aviation and Aerospace Component Manufacturing