Product Security & Integration Consultant

CBSbutler Holdings Limited trading as CBSbutler; Reading; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

CBSbutler is seeking an experienced Product Security Integration Manager, SC cleared, to drive the integration of product security, risk management and threat intelligence across engineering teams in Reading on a hybrid basis.

You will lead security governance, review authorisation to operate documents, develop policies, and collaborate with engineering to embed secure DevSecOps practices throughout the lifecycle.

Qualifications

• Proven experience in product security, security integration or risk management.
• Strong threat intelligence integration and risk-based security approaches.
• Experience embedding security into development processes with engineering teams.
• Knowledge of DevSecOps principles and secure pipelines.
• Experience developing security policies and technical documentation.
• Excellent stakeholder management to align engineering and security teams.
• Active SC Security Clearance.

Responsibilities

• Lead Product Security working groups to review processes and integrate risk management.
• Coordinate cross-functional groups across engineering and security teams.
• Review Security Authorisation to Operate documentation and integrate security.
• Develop and maintain security policies, procedures and risk processes.
• Contribute to risk management and threat integration plans.
• Integrate Threat Intelligence Platforms into engineering processes.
• Assess and improve DevSecOps practices and development pipelines.
• Manage stakeholder relationships balancing priorities and drive agreement.

Skills

Product security

Security integration

Threat intelligence integration

Security risk management

DevSecOps

Stakeholder management

SC clearance

Job description

Product Security Integration Manager - SC Cleared

Location: Reading - Hybrid Working

Contract: 12 Months

IR35: Inside IR35

Clearance: Active SC Clearance Required

Overview

We are seeking an experienced Product Security Integration Manager, driving the integration of product security, security risk management and threat intelligence across engineering teams.

Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle, improve security integration processes and ensure development activities align with security requirements.

Key Responsibilities

• Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence.
• Establish and coordinate cross-functional working groups across engineering and security teams.
• Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security considerations from a System 2 perspective.
• Develop and maintain security policies, procedures and risk management processes.
• Contribute to the Security Risk Management Integration Process and Threat Integration Plan.
• Integrate Threat Intelligence Platforms (TIP) into engineering processes, promoting a proactive, threat-led approach to development.
• Assess and recommend improvements to DevSecOps practices and development pipelines to strengthen security.
• Manage stakeholder relationships, balancing engineering priorities with security requirements and driving agreement on common solutions.

Essential Skills & Experience

• Proven experience in product security, security integration or security risk management.
• Strong understanding of threat intelligence integration and risk-based security approaches.
• Experience working with engineering teams to embed security into development processes.
• Knowledge of DevSecOps principles and secure software development pipelines.
• Experience developing security policies, procedures and technical documentation.
• Excellent stakeholder management skills, with the ability to align technical engineering and security teams.
• Active SC Security Clearance.

Contract Details

Duration: 12 months

Location: Reading, with hybrid working

IR35 Status: Inside IR35

This is an excellent opportunity for an SC-cleared security professional to play a key role in strengthening product security, threat integration and risk management across a major programme