Product Security Engineer

Pertemps; Bristol; Hybrid; GBP 60,000; Full time

Job summary

An exciting opportunity awaits as a Product Security Engineer with a global defence tech organisation. In this role, you will ensure that software, hardware, and service products are designed with robust security features. Your expertise will be crucial in identifying and mitigating security risks throughout the product lifecycle. Collaborating with development teams, you will integrate secure coding practices, conduct risk assessments, and ensure compliance with various security regulations. This position offers hybrid working, allowing for flexibility while contributing to vital security measures in a high-stakes environment. If you're passionate about cybersecurity and eager to make a difference, this role is perfect for you.

Qualifications

• Strong knowledge of risk management frameworks and methodologies.
• Experience with defence and government security standards.

Responsibilities

• Conduct risk assessments and implement mitigation measures.
• Integrate secure coding practices into the software development lifecycle.
• Conduct penetration testing and vulnerability assessments.

Skills

Risk Management Frameworks

Security Testing Tools

Problem-Solving Skills

Communication Skills

Decision-Making Skills

Education

Degree in Cybersecurity

Degree in Computer Science

Industry Certifications (CISSP, OSCP, CEH, GIAC)

Tools

Security Testing Tools

Job description

Product Security Engineer
Salary £60k + Benefits
Based Bristol with Hybrid Working

We are taking applications for this exclusive vacancy to work for our client, a global defence tech organisation as Product Security Engineer. In this exciting role the successful candidate will be responsible for ensuring that software, hardware, and service products are designed, developed, and maintained with strong security features. The role involves identifying and mitigating security risks throughout the product lifecycle, conducting risk assessments, and collaborating with development teams to integrate secure coding practices.

The Role Key Responsibilities:

1. Conduct risk assessments, identify vulnerabilities, and implement mitigation measures.
2. Integrate secure coding practices into the software development lifecycle.
3. Perform security code reviews and ensure secure-by-design principles.
4. Conduct threat modelling exercises to identify and mitigate potential risks.
5. Ensure compliance with security regulations such as ISO27001, NIST 800-30/37/53, JSP 440, 604, and Defence Standards.
6. Develop and maintain security documentation (e.g., RMADS, Security Assurance Documents, Security Management Plans).
7. Conduct penetration testing, vulnerability assessments, and remediation activities.

The Person Key Skills & Experience:

1. Strong knowledge of risk management frameworks and methodologies (ISO 27001/2, ISO27005/31000, NIST 800-30, NIST 800-53).
2. Experience with defence and government security standards (JSPs, Def Stan 05-138/139).
3. Proficiency in security testing tools, technologies, and techniques.
4. Ability to analyze and mitigate security vulnerabilities effectively.
5. Strong problem-solving, decision-making, and communication skills.

Qualifications & Requirements:

1. Degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).
2. Industry certifications such as CISSP, OSCP, CEH, or GIAC (preferred but not mandatory).
3. Must be eligible for SC security clearance.
4. Experience working in defence, government, or high-security environments is a plus.