Product Security Engineer - Build Secure Maritime Software

SRT Marine Systems plc; Bradley Stoke; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Competitive salary

25 days leave

Professional development

Job summary

SRT Marine Systems plc is seeking a Product Security Engineer to embed security into product development from design through delivery. You will collaborate with software teams to review designs, code and backlog decisions, ensuring security is built in from the start.

Based mainly in Bristol with occasional travel to Cardiff and Bath, this hands-on role offers hybrid working and real opportunities to lead and grow the product security capability across our global software estate.

Qualifications

• Strong software engineering background with ability to read code, review designs and engage credibly with developers.
• Experience in application security within a software-led environment.
• Practical experience across the SDLC including threat modelling, vulnerability management and secure delivery.

Responsibilities

• Champion security within product development teams, providing a clear day-to-day voice for security in design, code and backlog decisions.
• Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls.
• Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities.
• Assign pragmatic risk levels and support remediation prioritisation alongside feature delivery.
• Support vulnerability remediation and root cause analysis.
• Track security of third-party components and lead responses to new vulnerabilities.
• Ensure security features and fixes are represented in product roadmap and backlog decisions.
• Work with external security partners on penetration testing and security assessments.
• Contribute to security standards, metrics and ways of working.
• Support wider assurance and certification activity (ISO 27001) with evidence of secure software.

Skills

Secure software engineering

Threat modelling

Code review

CI/CD

Security standards

Job description

SRT Marine Systems plc is seeking a Product Security Engineer to embed security into product development from design through delivery. You will collaborate with software teams to review designs, code and backlog decisions, ensuring security is built in from the start.

Based mainly in Bristol with occasional travel to Cardiff and Bath, this hands-on role offers hybrid working and real opportunities to lead and grow the product security capability across our global software estate.