Product Security & Integration Consultant

CBSbutler Holdings Limited trading as CBSbutler; Reading; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Hyra in Reading offers a 12-month contract for a Product Security Integration Manager with active SC clearance. The role drives integration of product security, risk management and threat intelligence across engineering teams, promoting secure development practices.

You will embed risk-based security across the system lifecycle, coordinating with security and engineering stakeholders to strengthen security requirements and processes.

Qualifications

• Proven experience in product security and security integration.
• Strong understanding of threat intelligence integration and risk-based security.
• Experience embedding security in development processes with engineering teams.
• Knowledge of DevSecOps and secure software development pipelines.
• Experience developing security policies, procedures and technical documentation.
• Excellent stakeholder management and ability to align engineering and security teams.
• Active SC Security Clearance.

Responsibilities

• Lead Product Security working groups to review processes and integrate security risk management and threat intel.
• Establish cross functional working groups across engineering and security teams.
• Review Security Authorisation to Operate and related docs with security considerations.
• Develop and maintain security policies, procedures and risk management processes.
• Contribute to the Security Risk Management Integration and Threat Integration Plan.
• Integrate Threat Intelligence Platforms into engineering processes for proactive security.
• Assess and improve DevSecOps practices and development pipelines.
• Manage stakeholder relationships and align priorities across teams.

Skills

Product security

Security integration

Threat intelligence

DevSecOps

Stakeholder management

Job description

Product Security Integration Manager - SC Cleared

Location: Reading - Hybrid Working
Contract: 12 Months
IR35: Inside IR35
Clearance: Active SC Clearance Required

Overview

We are seeking an experienced Product Security Integration Manager , driving the integration of product security, security risk management and threat intelligence across engineering teams.

Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle, improve security integration processes and ensure development activities align with security requirements.

Key Responsibilities

• Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence.
• Establish and coordinate cross-functional working groups across engineering and security teams.
• Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security considerations from a System 2 perspective.
• Develop and maintain security policies, procedures and risk management processes.
• Contribute to the Security Risk Management Integration Process and Threat Integration Plan.
• Integrate Threat Intelligence Platforms (TIP) into engineering processes, promoting a proactive, threat-led approach to development.
• Assess and recommend improvements to DevSecOps practices and development pipelines to strengthen security.
• Manage stakeholder relationships, balancing engineering priorities with security requirements and driving agreement on common solutions.

Essential Skills & Experience

• Proven experience in product security, security integration or security risk management.
• Strong understanding of threat intelligence integration and risk-based security approaches.
• Experience working with engineering teams to embed security into development processes.
• Knowledge of DevSecOps principles and secure software development pipelines.
• Experience developing security policies, procedures and technical documentation.
• Excellent stakeholder management skills, with the ability to align technical engineering and security teams.
• Active SC Security Clearance.

Contract Details

• Duration: 12 months
• Location: Reading, with hybrid working
• IR35 Status: Inside IR35

This is an excellent opportunity for an SC-cleared security professional to play a key role in strengthening product security, threat integration and risk management across a major programme.