Product Security Engineer - Build Secure Maritime Solutions

SRT Marine Systems plc; Bath; Hybrid; GBP 65,000 - 100,000; Full time

Benefits offered by this job

Competitive salary

25 days annual leave

Professional development opportunities

Job summary

SRT Marine Systems plc is seeking a Product Security Engineer to embed security into our product development lifecycle. The role involves working with software developers, testers and product owners to ensure security is built in from design to delivery.

You will conduct threat modelling, secure design reviews and risk assessments, while guiding secure coding, testing, and vulnerability management. Occasional travel to Cardiff and Bath is expected, with hybrid working options.

Qualifications

• Strong software engineering background with ability to read code and designs.
• Experience in applying security across the software development lifecycle.
• Familiarity with standards like OWASP, CSSLP or ISO 27001 would be helpful.

Responsibilities

• Champion security within product development teams and backlog decisions.
• Embed secure development practices across SDLC including secure coding standards and CI/CD controls.
• Carry out threat modelling, secure design reviews and risk assessments.
• Assign pragmatic risk levels and enable remediation prioritisation with delivery.
• Support vulnerability remediation and root cause analysis.
• Track third-party components and manage supply-chain security incidents.
• Collaborate with product owners and engineering leadership on security in roadmaps.
• Coordinate penetration testing and security assessments with external partners.
• Contribute to security standards, metrics and best practices.

Skills

Software engineering

Application security

Threat modelling

Secure coding

Vulnerability management

Security communication

Job description

SRT Marine Systems plc is seeking a Product Security Engineer to embed security into our product development lifecycle. The role involves working with software developers, testers and product owners to ensure security is built in from design to delivery.

You will conduct threat modelling, secure design reviews and risk assessments, while guiding secure coding, testing, and vulnerability management. Occasional travel to Cardiff and Bath is expected, with hybrid working options.