Product Security Engineering Lead

Renishaw PLC; Kingswood; Hybrid; GBP 50,000 - 60,000; Full time

Job summary

A leading technology company in the UK seeks a Product Security Engineering Lead to guide product teams in identifying and mitigating security vulnerabilities. You will work closely with development teams to integrate security practices into the software development lifecycle. Ideal candidates will have a degree in Computer Science or related field and around 3 years of experience in cybersecurity. This role offers a competitive salary, hybrid working model, and a comprehensive benefits package including a pension scheme and health plans.

Benefits

9% non-contributory pension

Discretionary annual bonus

Subsidised onsite restaurants

Free parking

Car sharing scheme

24-hour fitness centres

25 days holiday plus bank holidays

Life Assurance policy

Cycle to Work scheme

Health Cash Plan

Employee Assistance Programme

Qualifications

• Around 3 years of experience in cybersecurity, information risk analysis or security engineering.
• Experience in identifying and remediating vulnerabilities, especially OWASP Top 10.
• Comfortable in performing penetration tests and secure code reviews.

Responsibilities

• Guide product divisions in identifying and mitigating security vulnerabilities.
• Integrate security practices into software development lifecycle.
• Develop and maintain security risk assessment processes.

Skills

Cybersecurity expertise

Secure coding practices

Penetration testing

Programming languages (C/C++, Python, Java)

Analytical and problem-solving skills

Communication and collaboration skills

Education

Bachelors / Masters in Computer Science or related field

Tools

Security scanning tools

Job description

Salary up to £60,000 depending on experience.

Location: Wotton-under-Edge, Glouc.

(no public transport available) Hybrid working 3 days / week onsite

Responsibilities

The Product Security Engineering Lead will be responsible for guiding and working with Renishaws product divisions to identify, assess, and mitigate security vulnerabilities in software and associated hardware products. They will work closely with development teams to integrate security practices into the software development lifecycle (SDLC) and help ensure products are secure and compliant with relevant standards and regulations, including the Cyber Resilience Act.

• Assess, establish and maintain clear guidelines and best practices for secure coding, vulnerability management, and incident response. • Develop and maintain product security risk assessment processes, providing support and guidance to project teams. • Develop scanning and review processes to discover security vulnerabilities and devise mitigation strategies, as well as report and resolve technical debt. • Serve as a Subject Matter Expert (SME) in product security for projects during development phases, providing information security consulting and recommendations, and ensuring the implementation of approved security requirements. • Collaborate with developers and their teams to ensure security is integrated at every stage of the software development lifecycle. • Guide teams to automate security scans and tests and implement secure coding practices, ensuring product compliance with regulatory standards. • Work with DevOps leads to ensure security tools and processes are integrated into their DevOps pipelines. • Monitor and assess the effectiveness of the implemented cybersecurity controls. • Coordinate activities with owning product divisions when vulnerabilities are reported by 3rd parties, and guide the response. • Work with development teams to remediate security vulnerabilities and prevent future incidents. • Track and address security issues effectively, ensuring timely remediation and patching. • Document and report results of the cybersecurity program to stakeholders. • Organise, design and deliver cybersecurity training and awareness-raising activities. • Share product security learning with the operational security team, and vice-versa. • Stay updated on the latest security threats, trends and best practices. • Identify opportunities to incorporate AI tooling into the development lifecycle, selecting and taking forward the most promising use cases.

Qualifications

• Bachelors / Masters degree or equivalent work experience in Computer Science, Information Security, Business, or a related field. • Circa 3 years of work experience in cybersecurity, especially in an information risk analysis, security engineering or security architecture role. • Experience in performing penetration testing, secure code review, software composition analysis, static, dynamic and manual code review. • Experience identifying and remediating common vulnerabilities, such as OWASP Top 10. • Hands‑on experience with security scanning tools. • Proven experience in secure coding practices and vulnerability assessment. • Experience securing hardware products controlled by software would be an advantage. • Experience applying AI to security and development use cases. • Familiar with threat modelling frameworks, and having experience with automated tools. • Excellent communication and collaboration skills to work effectively with cross‑functional teams. • Proficient in programming languages such as C / C++, Python, Java, etc. • Able to handle multiple concurrent tasks. • Strong analytical and problem‑solving skills.

Benefits

When you join Renishaw, we're committing to your future career. We believe in developing our people's skills and promoting them internally.

We also offer a benefits package that's highly desirable; including a 9% non‑contributory pension, discretionary annual bonus,

• subsidised onsite restaurants and coffee shops
• free parking
• car sharing scheme
• 24‑hour fitness centres

( not available at all sites ).

We also want to promote a healthy work‑life balance as much as possible, so we have introduced a hybrid working policy which allows for a combination of home and office based working depending on the nature of your role.

We also offer a variable working programme, 25 days holiday plus bank holidays, Life Assurance policy of 12 times annual salary, Cycle to Work scheme, enhanced maternity pay subject to qualifying criteria, Health Cash Plan, the option to join BUPA Renishaw Health Trust and an Employee Assistance Programme for employees and family.