Product Security Engineer

Matchtech; Bristol; Hybrid; GBP 50,000 - 90,000; Full time

Job summary

An established industry player is seeking a Product Security Engineer to design and safeguard innovative software and hardware solutions. In this pivotal role, you will embed security throughout the product lifecycle, ensuring compliance with key regulatory standards while collaborating closely with development teams. Your expertise in security frameworks and testing will be crucial in identifying vulnerabilities and guiding secure coding practices. This mid-senior level position offers an exciting opportunity to impact critical technology projects and contribute to the creation of secure, resilient systems in a fast-paced environment.

Qualifications

• Solid understanding of security frameworks such as ISO 27001/2 and NIST.
• Hands-on experience with Defence Standards and security testing tools.

Responsibilities

• Perform product risk assessments and identify vulnerabilities across platforms.
• Lead threat modelling exercises and develop mitigation strategies.

Skills

Security frameworks (ISO 27001/2, NIST)

Security testing tools and techniques

Communication skills

Problem-solving mindset

Experience with NIST standards

Job description

Product Security Engineer

3 days ago Be among the first 25 applicants

Direct message the job poster from Matchtech

Recruitment Business Partner at Matchtech | Recruiting across Engineering Technology Skillsets in the UK Defence market

Product Security Engineer

Location: Bristol Hybrid

Security Clearance: SC (Eligible for Clearance)

Are you passionate about building secure systems from the ground up?

We’re looking for a Product Security Engineer to play a key role in designing and safeguarding the next generation of software, hardware, and service products.

In this role, you will be responsible for embedding security throughout the product lifecycle — from initial design to deployment — by identifying vulnerabilities, conducting risk assessments, and guiding teams with secure development practices.

Responsibilities:

• Perform product risk assessments and identify vulnerabilities across platforms.
• Collaborate with developers to integrate secure coding practices from the start.
• Lead threat modelling exercises and develop mitigation strategies.
• Conduct security code reviews and provide guidance to ensure a secure-by-design approach.
• Ensure products meet key regulatory standards (ISO 27001, NIST 800 series, JSPs, Def Stans).
• Author security documentation, including RMADS and Security Assurance Documents.
• Perform penetration testing and coordinate remediation efforts.

Qualifications:

• Solid understanding of security frameworks such as ISO 27001/2, ISO 31000, NIST 800-30/37/53.
• Hands-on experience with Defence Standards (JSPs, HMG, Def Stan 05-138/139).
• Strong knowledge of security testing tools and techniques.
• Excellent communication skills to explain complex risks and solutions clearly.
• Proactive problem-solving mindset with high integrity and professional ethics.
• Experience with NIST standards (this is an absolute requirement).

Ideal Candidate Traits:

• Enjoy solving complex problems with innovative, practical solutions.
• Communicate clearly, confidently, and empathetically.
• Driven by quality, attention to detail, and delivering secure products exceeding expectations.
• Adapt well under pressure and thrive in fast-paced, multidisciplinary environments.

This role reports directly to the Head of Product Security and offers an excellent opportunity to impact critical technology projects. If you’re ready to help shape secure and resilient systems, we’d love to hear from you.

Additional Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Industries: Defense and Space Manufacturing, Computer and Network Security, Information Services