Product Security Engineer - Defence (SC Cleared)

CBS Butler; Luton; On-site; GBP 110,000 - 124,000; Full time

Job summary

CBS Butler is seeking an experienced Product Security Engineer to support Defence and Government customers in Luton. The role covers security across the full product life cycle, from design to maintenance, with emphasis on risk assessment, requirements, and control implementation.

You will collaborate with development teams, security authorities, and risk owners to ensure compliance with UK and international frameworks.

Qualifications

• Experience delivering product-based security solutions for defence/government or similar regulated environments.
• Strong background in product security engineering and information security.
• Experience conducting security risk assessments and defining mitigations.
• Experience defining product security requirements and producing assurance documentation.
• Experience collaborating with engineering teams and security authorities.

Responsibilities

• Develop Security Management Plans, work package descriptions and cost estimates for bids, services and proposals.
• Undertake security risk assessments and develop risk mitigation plans.
• Conduct mitigation gap analysis and produce security management documentation for system assurance.
• Define product security requirements and advise engineering teams on security control implementation.
• Work directly with product development teams throughout the product life cycle.
• Liaise with internal and external security assurance authorities to demonstrate compliance with relevant security frameworks.
• Manage security activities across development, testing and manufacturing environments.
• Advise engineering teams on platform lockdown, secure configuration and security hardening.
• Support penetration testing activities, analyse findings and develop remedial action plans.
• Manage through-life product security, including vulnerability management, patch management and security obsolescence planning.
• Support security incident management and crisis response activities.
• Review and contribute to corporate product security policies and processes.
• Deliver product security training and guidance to engineering teams.
• Produce and maintain technical security artefacts and assurance documentation.

Skills

Product Security

Information Security

Cyber Security

Security risk assessments

Stakeholder management

SC Clearance

Education

Degree in Engineering/CS/Cyber Security

Job description

CBS Butler is seeking an experienced Product Security Engineer to support Defence and Government customers in Luton. The role covers security across the full product life cycle, from design to maintenance, with emphasis on risk assessment, requirements, and control implementation.

You will collaborate with development teams, security authorities, and risk owners to ensure compliance with UK and international frameworks.