Product Security Engineering Lead

Renishaw; High Peak; Hybrid; GBP 50,000 - 60,000; Full time

Job summary

A leading engineering company is seeking a Product Security Engineering Lead to guide product divisions in mitigating security vulnerabilities. This role involves collaboration with development teams to incorporate security practices into the software development lifecycle and ensure compliance with relevant standards. The position offers a hybrid working model with attractive benefits including a non-contributory pension, bonus, and health plans.

Benefits

9% non-contributory pension

Discretionary annual bonus

Subsidised onsite restaurants

Coffee shops

Free parking

24-hour fitness centres

25 days holiday plus bank holidays

Health Cash Plan

Qualifications

• Experience in penetration testing and secure code review.
• Hands-on experience with security scanning tools.
• Knowledge of the OWASP Top 10 vulnerabilities.

Responsibilities

• Establish guidelines for secure coding and vulnerability management.
• Develop product security risk assessment processes.
• Collaborate with teams to integrate security into the SDLC.

Skills

Penetration testing

Secure coding practices

Vulnerability assessment

Programming languages (C, C++, Python, Java)

Threat modeling frameworks

Security scanning tools

Analytical skills

Communication and collaboration

Job description

Job Description

Salary up to 60000 depending on experience.

Location Wotton-under-Edge Glouc. (no public transport available)

Hybrid working 3 days / week onsite

To bring greater focus to our product security engineering activities the Product Security Engineering Lead will be responsible for guiding and working with Renishaws product divisions to identify assess and mitigate security vulnerabilities in software and associated hardware products. They will work closely with development teams to integrate security practices into the software development lifecycle (SDLC) and help ensure products are secure and compliant with relevant standards and regulations including the Cyber Resilience Act.

Responsibilities

Assess establish and maintain clear guidelines and best practices for secure coding vulnerability management and incident response

Develop and maintain product security risk assessment processes providing support and guidance to project teams

Develop scanning and review processes to discover security vulnerabilities and devise mitigation strategies as well as report and resolve technical debt

Serve as a Subject Matter Expert (SME) in product security for projects during development phases providing information security consulting and recommendations and ensuring the implementation of approved security requirements

Collaborate with developers and their teams to ensure security is integrated at every stage of the software development lifecycle

Guide teams to automate security scans and tests and implement secure coding practices ensuring product compliance with regulatory standards

Work with DevOps leads to ensure security tools and processes are integrated into their DevOps pipelines

Monitor and assess the effectiveness of the implemented cybersecurity controls

Coordinate activities with the owning product divisions when vulnerabilities are reported by 3rd parties and guide the response

Work with development teams to remediate security vulnerabilities and prevent future incidents

Track and address security issues effectively ensuring timely remediation and patching

Document and report results of the cybersecurity program to stakeholders

Organise design and deliver cybersecurity training and awareness-raising activities

Share product security learning with the operational security team and vice-versa

Stay updated on the latest security threats trends and best practices

Identify opportunities to incorporate AI tooling into the development lifecycle selecting and taking forward the most promising use cases

Key requirements

Experience in performing penetration testing secure code review software composition analysis static dynamic and manual code review

Experience identifying and remediating common vulnerabilities such as OWASP Top 10

Hands-on experience with security scanning tools

Proven experience in secure coding practices and vulnerability assessment

Experience securing hardware products controlled by software would be an advantage

Experience applying AI to security and development use cases

Familiar with threat modelling frameworks and having experience with automated tools

Knowledge and skills

Excellent communication and collaboration skills to work effectively with cross-functional teams

Proficient in programming languages such as C / C Python Java etc.

Able to handle multiple concurrent tasks

Strong analytical and problem-solving skills

Benefits

When you join Renishaw we are committing to your future career. That’s because we believe in developing our peoples skills and promoting them internally. We also offer a benefits package that’s highly desirable; including a 9% non-contributory pension discretionary annual bonus

• subsidised onsite restaurants and
• coffee shops free parking
• car sharing scheme and
• 24 hour fitness centres. ( not available at all sites ).

We also want to promote a healthy work-life balance as much as possible so we have introduced a hybrid working policy which allows for a combination of home and office based working depending on the nature of your role. We also offer a variable working programme 25 days holiday plus bank holidays Life Assurance policy of 12 times annual salary Cycle to Work scheme enhanced maternity pay subject to qualifying criteria Health Cash Plan the option to join BUPA Renishaw Health Trust and an Employee Assistance Programme for employees and family.

Please click here for further information about our benefits.

At Renishaw we believe that our success is powered by welcoming a workforce of diverse and talented people. Through encouraging an inclusive culture where all our employees are free to be themselves we can achieve our core values : Innovation Inspiration Integrity and Involvement.

If you are excited about the role but feel as though you dont meet all the requirements we would encourage you still to apply. You might just be the right person for this role or another opportunity at Renishaw.

We are committed to providing reasonable adjustments to make interviews and jobs more accessible. Should you have any difficulty during the recruitment process or require any reasonable adjustments please contact the recruitment team on0or

Please click here for further information about diversity and inclusion at Renishaw.