Product Security Engineer for Defence & Government

Morson Human Resources Limited; England; On-site; GBP 70,000 - 110,000; Full time

Job summary

Morson Human Resources Limited seeks a Product Security Engineer to own security across the product lifecycle for defence/government solutions. You will conduct risk assessments, derive security requirements, and work with engineering teams to implement robust security controls.

The role involves coordinating with security authorities, applying standards such as ISO 27001 and NIST, and driving through-life security activities including vulnerability management and incident response.

Qualifications

• Proven experience developing bespoke product security solutions in defence/government environments.
• Engineering/CS/Cyber Security degree or equivalent professional experience.
• Full membership of CIISec, ISC2 or ISACA.
• Knowledge of UK/EU/NATO security standards and frameworks (ISO 27001, NIST, etc).
• Eligibility to obtain UK Security Clearance (SC).
• Excellent written and verbal communication and stakeholder engagement abilities.

Responsibilities

• Produce Security Management Plans, work package descriptions, and cost estimates to support bids, proposals, and service delivery activities.
• Conduct security risk assessments, mitigation planning, gap analyses, and prepare security assurance documentation.
• Define security requirements and provide guidance to development teams on implementing security controls.
• Collaborate with security assurance authorities to demonstrate compliance with customer, regulatory, and industry standards.
• Engage with organisations like the NCSC for assurance and accreditation activities.
• Oversee and manage security activities across development, testing, and manufacturing environments.
• Advise on platform hardening, secure configurations, and penetration testing with remediation plans.
• Drive through-life security management activities including vulnerability and patch management.
• Support and lead security incident response during incidents or crises.
• Review and maintain corporate product security policies and standards.
• Deliver product security training and awareness sessions to engineering and project teams.

Skills

Security solutions development

Engineering/CS/Cyber Security degree

Professional security body membership

Security standards knowledge

Technical assurance documentation

Cryptography & key management

MBSE security integration

Security controls across OS/firmware/­

Communication skills

Stakeholder engagement

Security clearance eligibility

Education

Engineering/CS/Cyber Security degree or equivalent

Job description

Morson Human Resources Limited seeks a Product Security Engineer to own security across the product lifecycle for defence/government solutions. You will conduct risk assessments, derive security requirements, and work with engineering teams to implement robust security controls.

The role involves coordinating with security authorities, applying standards such as ISO 27001 and NIST, and driving through-life security activities including vulnerability management and incident response.