Product Security Engineer: Build Security Into Our Software

Srt Marine; Birmingham; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

25 days leave

Development opportunities

Job summary

SRT Marine Systems plc is a leading provider of international marine surveillance technology. We are seeking a Product Cybersecurity Engineer to embed security into our products from design to delivery.

Based primarily in our Bristol office with travel to Cardiff and Bath, the role supports hybrid working. You will work closely with developers, testers and product owners to ensure robust security across the software lifecycle.

Qualifications

• Strong software engineering background with the ability to read code, review designs and engage with experienced developers.
• Experience in application security or secure software engineering in a software-led environment.
• Practical experience applying security across the software development lifecycle, including threat modelling, secure coding, testing and vulnerability management.
• Good understanding of how product and development teams operate, balancing security with delivery.

Responsibilities

• Champion security within product development teams, providing a clear day-to-day voice for security in design, code and backlog decisions.
• Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls.
• Carry out threat modelling, secure design reviews and risk assessments for new and existing product capabilities.
• Assign pragmatic risk levels and support prioritisation of remediation alongside feature delivery.
• Support vulnerability remediation, including root cause analysis and long-term fixes.
• Track the security of third-party components and lead responses to new vulnerabilities.
• Ensure security features and fixes are represented in product roadmap and design decisions.
• Work with external security partners on penetration testing and security assessments.
• Contribute to security standards, metrics and ways of working to improve maturity.
• Support wider assurance and certification activity, including ISO 27001.

Skills

Software engineering

Application security

Threat modelling

Secure coding

Security reviews

Communication skills

ISO 27001

Job description

SRT Marine Systems plc is a leading provider of international marine surveillance technology. We are seeking a Product Cybersecurity Engineer to embed security into our products from design to delivery.

Based primarily in our Bristol office with travel to Cardiff and Bath, the role supports hybrid working. You will work closely with developers, testers and product owners to ensure robust security across the software lifecycle.