Product Security Lead - 6-Month Contract

ARM (Advanced Resource Managers); Luton; On-site; GBP 117,000 - 128,000; Full time

Job summary

ARM (Advanced Resource Managers) in Luton seeks a Product Security Engineer to own security aspects across the product lifecycle. You will conduct security risk assessments, derive requirements, and work closely with development teams to implement robust security controls and artefacts.

The role requires leading security planning, risk mitigation, and collaboration with external authorities, including NCSC, to demonstrate compliance.

Qualifications

• Graduate degree in relevant engineering, computing or related science.
• Full membership of a recognised security body (CIISec/ISC2/ISACA).
• Knowledge of live UK/EU/NATO information security standards and frameworks.
• Experience producing assurance documentation (Key Management Plans, Security Instructions, SOPs, Security Cases).
• Knowledge of cryptographic technologies and key management.
• Understanding MBSE and its role in Product Security.
• Knowledge of bespoke OS/fw/sw security controls.
• Knowledge of Quantum Cryptography & Quantum Key management.
• Experience or knowledge of threat intelligence sources.
• Knowledge of NATO security policy, risk management and accreditation.

Responsibilities

• Production of Security Management Plans and cost estimates for bids and proposals.
• Conduct security risk assessments, risk mitigation plans and analysis.
• Define product security requirements and advise development teams.
• Coordinate with internal and external security authorities to demonstrate compliance.
• Collaborate with authorities such as NCSC to underpin security solutions.
• Manage security activities across development, testing and manufacturing.
• Advise on platform lockdown configurations and support penetration testing.
• Analyse penetration test results and plan remediations.
• Oversee life cycle security management including obsolescence and patch management.
• Lead security incident management with senior security leadership as needed.
• Review and update corporate product security policies.
• Deliver product security training to project teams.

Skills

Product security

Security risk assessment

MBSE

Cryptography

Vulnerability management

Incident management

Security testing

Policy compliance

Education

Graduate degree in engineering/computing

Membership in security body (CIISec/ISC2/ISACA)

Job description

ARM (Advanced Resource Managers) in Luton seeks a Product Security Engineer to own security aspects across the product lifecycle. You will conduct security risk assessments, derive requirements, and work closely with development teams to implement robust security controls and artefacts.

The role requires leading security planning, risk mitigation, and collaboration with external authorities, including NCSC, to demonstrate compliance.