Product Security Architect

JR United Kingdom; Newport; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading Defence and Aerospace company in Newport is looking for a skilled Product Security Architect. This permanent role involves ensuring security best practices in product development, working closely with development teams on security infrastructure, and applying risk management frameworks. It's a unique opportunity to contribute significantly to the security standards in a sector that impacts national safety.

Qualifications

• Experience in security infrastructure and best practices is essential.
• Knowledge of risk management frameworks like ISO 27001/2 is required.

Responsibilities

• Identify and integrate security requirements during product development.
• Develop risk management strategies and perform threat modeling.

Skills

Risk Management

Security Threat Modeling

Security Controls

Secure by Design

Tools

ISO/IEC 27001

NIST 800-30

NIST 800-53

OWASP

Job description

Product Security Architect

Permanent role

Location: Newport, Wales, United Kingdom

Job Description:

We are seeking a skilled Product Security Architect to join a leading Defence and Aerospace company based in Newport, Wales. This role involves working on security infrastructure, secure by design principles, and collaborating with development teams to ensure security best practices are integrated into product development.

Key Responsibilities:

1. Identify security requirements and ensure security controls are integrated during the product development lifecycle.
2. Develop and implement risk management strategies.
3. Perform security threat modeling and risk assessments, applying security controls to mitigate threats.
4. Collaborate with development teams to adopt Secure by Design principles.
5. Identify security risks from solution architectures and advise on mitigation measures.
6. Develop and maintain security guidelines, documentation, and training materials.
7. Participate in incident response and remediation for security breaches.
8. Ensure compliance with HMG standards and MOD-specific security standards.
9. Apply knowledge of security frameworks such as ISO/IEC 27001, NIST 800-30, NIST 800-53, or OWASP.
10. Work with risk management frameworks like ISO 27001/2, ISO27005/31000, NIST 800-30, NIST 800-53.

If you're interested in this opportunity, please apply to discuss further!