Product Security Engineer

Buscojobs; Greater London; On-site; GBP 100,000 - 125,000; Full time

Job summary

An established industry player is seeking a Cyber and Product Security Engineer to join their dynamic team. In this role, you will be responsible for delivering comprehensive Cyber and Product Security programs, ensuring that all projects meet stringent security standards. Collaborating with various engineering streams, you will play a crucial role in integrating security measures into product development and verification processes. This position offers the opportunity to work within a diverse and inclusive environment, where your contributions will significantly impact the safety and security of innovative technology solutions. If you are passionate about security and eager to make a difference, this role is perfect for you.

Qualifications

• Knowledge of Australian security standards and frameworks is advantageous.
• Experience in Cyber and Product Security Engineering is essential.

Responsibilities

• Provide technical advice on Cyber and Product Security to project teams.
• Ensure designs meet regulatory requirements and security practices.

Skills

Cyber Security

Product Security

Risk Mitigation

Stakeholder Engagement

Technical Documentation

Education

Bachelor's degree in Engineering

Tools

CISSP

GSEC

CISA

CRISC

Job description

We work in a thriving sector – one that puts us at the forefront of exciting and meaningful work. Every day we push boundaries to produce some of the world’s most innovative and groundbreaking technology. Individually we all contribute to our success. Collectively we make the impossible possible.

Recognised for delivering projects of global and national significance that help keep Australia safe, it is our shared passion that shapes our culture, and our people that make it a great place to work.

About the OPPORTUNITY

We have an exciting opportunity for a Cyber and Product Security Engineer to join our JORN line of business based at SA – Edinburgh Parks or VIC – Melbourne Central, reporting to the Product Security Lead.

We embrace flexible work arrangements at BAE Systems Australia, such as working a 9-day fortnight.

In your role as a member of the Product Security Team, you will be responsible for delivering Cyber and Product Security programs for projects undertaken by the Company. This position necessitates seamless integration with other engineering streams. As a Cyber and Product Security Engineer, you will collaborate with project design teams (software, hardware, mechanical, etc.) and support teams to ensure a systems-oriented, integrated approach is adopted for product security-related development, verification, and sustainment activities.

Key responsibilities include:

• Provide technical advice in the domain of Cyber and Product Security to the project team.
• Provide support for assurance that the design meets customer, regulatory and statutory requirements, applies good security industry practices, mitigates security risks to the agreed level and addresses hazards related to security and provide supporting documentation for the safety case.
• Ensure that product security characteristics of all procured items are understood and acceptable. Engage with suppliers as required.
• Maintain design integrity and associated documentation in line with relevant configuration management, change management, and traceability protocols.
• Perform Peer reviews of product security related documentation produced by BAE Systems and suppliers as assigned.
• Liaise with both internal and external stakeholders as required ensuring that their requirements are adequately supported and that their needs are fully considered and incorporated where appropriate and agreed.
• Provide accurate program status updates, identify problem areas, and execute agreed-upon recovery strategies.

About YOU

• Knowledge of commonly used Australian and Industry security standards and accreditation frameworks (eg. PSPF, DSPF, ISM, ISO 270001 / 2, NIST Special Publications, HB167-20006, RMF, OWASP, CIS) is considered advantageous.
• Experience within a Product and Cyber Security Engineering discipline which encompasses physical, cyber and emissions security and concept of cyber resilience.
• Working knowledge of; CISSP or GSEC and CISA or CRISC is desirable.
• Good knowledge of ICT vendors’ technologies.
• Bachelor’s degree in an Engineering discipline is considered desirable.
• Defence security clearance or eligibility to obtain & eligibility to be cleared for International Traffic In Arms (ITAR) regulations.

We believe in hiring for potential, we know that some candidates hesitate if they don’t tick all the boxes. If this role interests you, but you don’t meet all the criteria, we still encourage you to apply.

About US

You will be joining a workplace that truly cares about your wellbeing.

Our people are diverse and we value the variety of perspectives this brings, we know that a culture that is inclusive and fosters a sense of belonging is a place we can all make the most of our unique talents and be our best.

As Australia’s largest defence company in a rapidly growing sector, you will be connected into a global team and encouraged to explore where your career might take you whether that is a traditional career path or squiggly one, there are infinite possibilities for you at BAE Systems Australia.

We welcome applicants from all people regardless of sex, gender identity, race, ethnicity, disability, pregnancy, age, or other lived experience; and strongly encourage applications from Aboriginal and Torres Strait Islander people for all positions.

We are proud to be recognised as an employer of choice for women by WORK180.

As a member of the Circle Back Initiative we commit to respond to every applicant.

To learn more about our competitive employee benefits, flexibility, other employment opportunities and what to expect from our recruitment process please visit: www.baesystemscareers.com.au

Clearances

As a Defence security clearance is required for this role, applicants must be Australian citizens and either possess or be eligible to obtain and maintain appropriate clearances.

Further information regarding security clearances.