Product Security Engineer – Defence & Government (SC)

CBSbutler Holdings Limited trading as CBSbutler; Luton; On-site; GBP 140,000 - 180,000; Full time

Job summary

CBSbutler Holdings Limited trading as CBSbutler is seeking a Product Security Engineer for Defence & Government with active SC clearance and UK Eyes Only eligibility. Location is Lut on with 90% onsite work.

The role focuses on security across the full product lifecycle, from design to maintenance, and involves risk assessments, requirements definition and security controls implementation. The successful candidate will work with development teams and security authorities to ensure compliance

Qualifications

• Demonstrable experience developing product-based security solutions for military, defence, government or commercial products and systems.
• Strong experience in Product Security / Information Security / Cyber Security Engineering.
• Experience undertaking security risk assessments and developing risk mitigation strategies.
• Experience defining and managing product security requirements.
• Experience producing technical security assurance documentation.
• Experience working directly with engineering and product development teams.
• Strong understanding of security throughout the product lifecycle.
• Practical experience with security assurance and compliance activities.
• Knowledge of UK Defence and Government security frameworks.
• Experience with UK/EU/NATO information security standards and frameworks.

Responsibilities

• Develop Security Management Plans, work package descriptions and cost estimates for bids, services and proposals.
• Undertake security risk assessments and develop risk mitigation plans.
• Define product security requirements and advise engineering teams on security control implementation.
• Work directly with product development teams throughout the product lifecycle.
• Liaise with security assurance authorities to demonstrate compliance with frameworks.
• Manage security activities across development, testing and manufacturing environments.
• Advise on platform lockdown, secure configuration and security hardening.
• Support penetration testing activities and remedial actions.
• Manage through-life product security including vulnerability and patch management.
• Support security incident management and crisis response.

Skills

Security risk assessments

Security lifecycle

Product security requirements

Security assurance documentation

Stakeholder management

Penetration testing support

Security controls implementation

MBSE awareness

Education

Engineering / Computer Science / Cyber Security degree

Job description

CBSbutler Holdings Limited trading as CBSbutler is seeking a Product Security Engineer for Defence & Government with active SC clearance and UK Eyes Only eligibility. Location is Lut on with 90% onsite work.

The role focuses on security across the full product lifecycle, from design to maintenance, and involves risk assessments, requirements definition and security controls implementation. The successful candidate will work with development teams and security authorities to ensure compliance