Product Security Engineer

JR United Kingdom; Bradley Stoke; On-site; GBP 40,000 - 65,000; Full time

Job summary

A leading defence and aerospace company seeks a Product Security Engineer based in Bradley Stoke. This permanent role involves conducting risk assessments, implementing secure coding practices, and ensuring compliance with regulatory standards. The company offers growth opportunities for candidates passionate about security engineering and product safety.

Qualifications

• Experience in Secure by Design.
• Experience with security testing tools and techniques.
• Knowledge of ISO standards like ISO27001.

Responsibilities

• Conduct risk assessments and identify vulnerabilities.
• Implement security controls and conduct penetration testing.
• Produce security documentation and ensure compliance with standards.

Skills

Risk Assessment

Secure Coding Practices

Threat Modelling

Penetration Testing

Vulnerability Assessments

Education

Security Engineering Certification

Degree in Computer Science or related field

Tools

Security Testing Tools

Risk Management Frameworks

Job description

Social network you want to login/join with:

Product Security Engineer, bradley stoke

Client: Advanced Resource Managers

Location: bradley stoke, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 4

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

Product Security Engineer

Permanent role

Based in Bristol

Do you have experience in Secure by Design?

Do you have experience in Product Security Engineering?

Do you want to work with an industry-leading company?

If your answers are yes to these, then this could be the role for you!

As the Product Security Engineer, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry!

Some of what you will be involved in:

• Conduct risk assessments and identify vulnerabilities in product design, implementation, and deployment.
• Implement controls and mitigations to manage identified risks.
• Collaborate with development teams to integrate secure coding practices throughout the software development lifecycle.
• Perform security code reviews and provide security guidance during product design and development to ensure Secure by Design.
• Conduct threat modelling exercises to prioritise potential risks and develop mitigation strategies to reduce risks.
• Ensure products meet regulatory standards such as ISO27001, NIST 800-30/37/53, JSP standards, and Defence Standards.
• Produce security documentation like RMADS, Security Assurance Document, and Security Management Plan.
• Conduct penetration testing, vulnerability assessments, and remediation activities.
• Understand and apply risk management frameworks and methodologies (e.g., ISO 27001/2, ISO27005/31000, NIST 800-30, NIST 800-53).
• Work with Defence Standards (e.g., JSPs, HMG, Def Stan 05-138, 05-139).
• Experience with security testing tools, technologies, and techniques.

If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further!