Product Security Engineer - Defence (Hybrid, SC Eligible)

Matchtech; West of England; Hybrid; GBP 45,000 - 70,000; Full time

Job summary

A leading company in defense and technology is seeking a Security Engineer to enhance the security architecture of critical systems. The role demands expertise in NIST standards and Defence Standards, focusing on risk assessments, threat modelling, and secure engineering practices. Candidates must be detail-oriented and capable of navigating complex security challenges while working collaboratively within an agile environment. This position offers a hybrid work setting in Bristol with a full-time commitment.

Qualifications

• Proven experience with NIST 800-30, 800-37, 800-53 (Essential).
• Knowledge of Defence Standards, especially DefStan 05-138 and 05-139.
• Solid understanding of ISO 27001/2, ISO 31000, and JSPs.

Responsibilities

• Leading product risk assessments and driving security improvements.
• Conducting threat modelling and collaborating with engineers.
• Performing code reviews and penetration testing.

Skills

Threat modelling

Risk assessment

Secure-by-design engineering

Communication

Problem solving

Tools

Threat modelling tools

Job description

A leading company in defense and technology is seeking a Security Engineer to enhance the security architecture of critical systems. The role demands expertise in NIST standards and Defence Standards, focusing on risk assessments, threat modelling, and secure engineering practices. Candidates must be detail-oriented and capable of navigating complex security challenges while working collaboratively within an agile environment. This position offers a hybrid work setting in Bristol with a full-time commitment.