Product Security Engineer: Secure-by-Design Champion

SRT Marine Systems plc; Newport; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Highly Competitive Salary and benefits

25 days annual leave rising to 28 days

Real development opportunities

Job summary

SRT Marine Systems plc is seeking a Product Security Engineer to embed security into our software products from design to delivery. Based in the UK with hybrid flexibility, you will work with software developers, testers and product owners to strengthen security across the development lifecycle.

You will lead threat modelling, secure coding reviews and risk assessments, collaborate with external security partners for testing, and contribute to ISO 27001 initiatives, helping SRT raise its product

Qualifications

• Strong software engineering background with ability to read code and review designs.
• Experience or specialization in application security.
• Experience across SDLC including threat modelling, secure coding, testing, vulnerability management.
• Understanding of how product teams operate and balance security with delivery.
• Ability to assess exploitability and business impact pragmatically.
• Strong communication to translate security concerns into actionable decisions.
• Ambition to focus on security and grow with the role.
• Familiarity with standards such as OWASP, CSSLP, ISO 27001.
• Experience in product/SaaS environments.
• Experience in high-trust or regulated settings.

Responsibilities

• Champion security within product development teams, providing a clear day-to-day voice for security in design, code and backlog decisions.
• Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls.
• Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities.
• Assign pragmatic risk levels and support remediation prioritisation alongside feature delivery.
• Support vulnerability remediation, including root cause analysis and long-term fixes.
• Track the security of third-party components and dependencies within our products and lead responses to new vulnerabilities.
• Ensure security features and fixes are represented in product roadmap and design decisions.
• Work with external security partners for penetration testing and security assessments.
• Contribute to security standards, metrics and ways of working to improve maturity.
• Support assurance and ISO 27001 certification evidence.

Skills

Software engineering

Application security

Threat modelling

Secure coding

Vulnerability management

Technical communication

Tools

OWASP

Job description

SRT Marine Systems plc is seeking a Product Security Engineer to embed security into our software products from design to delivery. Based in the UK with hybrid flexibility, you will work with software developers, testers and product owners to strengthen security across the development lifecycle.

You will lead threat modelling, secure coding reviews and risk assessments, collaborate with external security partners for testing, and contribute to ISO 27001 initiatives, helping SRT raise its product