Product Security & Integration Consultant

CBSbutler Holdings Limited trading as CBSbutler; Old Warren; Hybride; GBP 70 000 - 100 000; Plein temps

Résumé du poste

CBSbutler Holdings Limited trading as CBSbutler is recruiting a Product Security Integration Manager (SC Cleared) for a 12-month contract in Reading with hybrid working. You will drive security integration across engineering, lead security governance, and embed threat-informed practices throughout the lifecycle.

Ideal candidates bring proven product security experience, robust threat intelligence knowledge, and strong stakeholder management.

Qualifications

• Proven experience in product security, security integration or security risk management.
• Strong understanding of threat intelligence integration and risk-based security approaches.
• Experience working with engineering teams to embed security into development processes.
• Knowledge of DevSecOps principles and secure software development pipelines.
• Experience developing security policies, procedures and technical documentation.
• Excellent stakeholder management skills, with the ability to align technical engineering and security teams.
• Active SC Security Clearance.

Responsabilités

• Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence.
• Establish and coordinate cross-functional working groups across engineering and security teams.
• Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security considerations from a System 2 perspective.
• Develop and maintain security policies, procedures and risk management processes.
• Contribute to the Security Risk Management Integration Process and Threat Integration Plan.
• Integrate Threat Intelligence Platforms (TIP) into engineering processes, promoting a proactive, threat-led approach to development.
• Assess and recommend improvements to DevSecOps practices and development pipelines to strengthen security.
• Manage stakeholder relationships, balancing engineering priorities with security requirements and driving agreement on common solutions.

Connaissances

Product security

Security integration

Threat intelligence

DevSecOps

Stakeholder mgmt

SC Clearance

Description du poste

Product Security Integration Manager - SC Cleared

Location: Reading - Hybrid Working

Contract: 12 Months

IR35: Inside IR35

Clearance: Active SC Clearance Required

Overview

We are seeking an experienced Product Security Integration Manager, driving the integration of product security, security risk management and threat intelligence across engineering teams.

Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle, improve security integration processes and ensure development activities align with security requirements.

Key Responsibilities

• Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence.
• Establish and coordinate cross-functional working groups across engineering and security teams.
• Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security considerations from a System 2 perspective.
• Develop and maintain security policies, procedures and risk management processes.
• Contribute to the Security Risk Management Integration Process and Threat Integration Plan.
• Integrate Threat Intelligence Platforms (TIP) into engineering processes, promoting a proactive, threat-led approach to development.
• Assess and recommend improvements to DevSecOps practices and development pipelines to strengthen security.
• Manage stakeholder relationships, balancing engineering priorities with security requirements and driving agreement on common solutions.

Essential Skills & Experience

• Proven experience in product security, security integration or security risk management.
• Strong understanding of threat intelligence integration and risk-based security approaches.
• Experience working with engineering teams to embed security into development processes.
• Knowledge of DevSecOps principles and secure software development pipelines.
• Experience developing security policies, procedures and technical documentation.
• Excellent stakeholder management skills, with the ability to align technical engineering and security teams.
• Active SC Security Clearance.

Contract Details

• Duration: 12 months
• Location: Reading, with hybrid working
• IR35 Status: Inside IR35

This is an excellent opportunity for an SC-cleared security professional to play a key role in strengthening product security, threat integration and risk management across a major programme