Product Security Engineer — Secure by Design Champion

SRT Marine Systems plc; Gloucester; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Competitive salary

25 days leave

Development opportunities

Job summary

SRT Marine Systems plc is seeking a Product Security Engineer to embed security into every stage of our product development lifecycle. You will collaborate daily with software developers, testers and product owners to ensure secure design, code quality and dependable delivery.

The role combines hands-on engineering with threat modelling, risk assessment and secure delivery practices to elevate our security posture.

Qualifications

• Strong software engineering background with ability to read code and review designs.
• Experience in application security or secure software engineering.
• Hands-on security across the SDLC: threat modelling, secure coding, testing, vulnerability management.
• Ability to balance security with product delivery and communicate with developers.
• Familiarity with OWASP, ISO 27001 or similar frameworks is helpful.

Responsibilities

• Champion security within product teams and influence design, code and backlog decisions.
• Embed secure development practices across lifecycle including secure coding and CI/CD.
• Carry out threat modelling, secure design reviews and risk assessments.
• Assign pragmatic risk levels and support remediation prioritisation.
• Support vulnerability remediation and root cause analysis.
• Track third‑party components security and respond to supply‑chain incidents.
• Ensure security features are represented in roadmaps and design decisions.
• Collaborate with external security partners for testing and assessments.
• Contribute to security standards and metrics.
• Support assurance and certification activities like ISO 27001.

Skills

Software engineering

Application security

Threat modelling

Secure SDLC

Communication

Job description

SRT Marine Systems plc is seeking a Product Security Engineer to embed security into every stage of our product development lifecycle. You will collaborate daily with software developers, testers and product owners to ensure secure design, code quality and dependable delivery.

The role combines hands-on engineering with threat modelling, risk assessment and secure delivery practices to elevate our security posture.