SC-Cleared Product Security Engineer (Defence)

Synergize Consulting Ltd; Luton; On-site; GBP 73,000 - 123,000; Full time

Job summary

Synergize Consulting Ltd is seeking an SC-cleared Lead Security Engineer for our Defence-focused product environment in the UK. The role is predominantly onsite in Luton, offering responsibility for security across the full product lifecycle and direct collaboration with product development and systems engineering teams.

You will lead security risk assessments, define product security requirements, produce security management documentation, and advise on secure design, platform hardening and

Qualifications

• Proven Product Security / Security Engineering experience within Defence, Aerospace, military or complex engineering environments.
• Active SC Clearance – essential.
• Strong understanding of UK MOD Secure by Design and Defence security assurance.
• Experience with frameworks including GovS 007, HMG IS1/IS2, ISO 27001, NIST and MOD JSPs.
• Understanding of Systems Engineering, V&V, Product Test experience.
• Experience with product-specific OS, firmware and software security controls.

Responsibilities

• Undertake security risk assessments, mitigation planning and gap analysis.
• Define and manage Product Security requirements across the product lifecycle.
• Produce Security Management Plans, Security Cases, SOPs and wider assurance documentation.
• Advise engineering teams on secure product design, platform hardening and security controls.
• Support penetration testing, analyse findings and drive remediation.
• Liaise with internal and external security assurance authorities, including Defence stakeholders and the NCSC.
• Manage through-life security including vulnerability, patch and obsolescence management.
• Support security activities across development, testing and manufacturing.
• Contribute to Product Security policies, processes and training.

Skills

Product Security

Security Engineering

SC Clearance

Defence Sector

GovS 007

HMG IS1/IS2

ISO 27001

NIST

MOD JSPs

Systems Engineering

V&V

Product Testing

Firmware Security

OS Security

Job description

SC Cleared Lead Security Engineer – Defence

Product Security (Defence)

Predominantly onsite in Luton

Up to £89.50 p/h Inside IR35

We are currently recruiting for an experienced security cleared OT/Lead Security Engineer to join a Defence-focused engineering environment, taking responsibility for security across the full product lifecycle.

This is a hands-on security engineering role, working directly with product development and systems engineering teams to identify security risks, define requirements, implement appropriate controls and deliver the security assurance required for complex Defence products.

Active SC Clearance is required, with the role being predominantly onsite in a secure Defence environment.

Key Responsibilities

• Undertake security risk assessments, mitigation planning and gap analysis.
• Define and manage Product Security requirements across the product lifecycle.
• Produce Security Management Plans, Security Cases, SOPs and wider assurance documentation.
• Advise engineering teams on secure product design, platform hardening and security controls.
• Support penetration testing, analyse findings and drive remediation.
• Liaise with internal and external security assurance authorities, including Defence stakeholders and the NCSC.
• Manage through-life security including vulnerability, patch and obsolescence management.
• Support security activities across development, testing and manufacturing.
• Contribute to Product Security policies, processes and training.

What We're Looking For

• Proven Product Security / Security Engineering experience within Defence, Aerospace, military or complex engineering environments.
• Active SC Clearance – essential.
• Strong understanding of UK MOD Secure by Design and Defence security assurance.
• Experience with frameworks including GovS 007, HMG IS1/IS2, ISO 27001, NIST and MOD JSPs.
• Understanding of Systems Engineering, V&V, Product Test experience
• Experience with product-specific OS, firmware and software security controls.

This is an excellent opportunity for an SC-cleared security professional who wants to work at the intersection of Cyber Security, Product Security and Defence Engineering, influencing security from initial design through to deployment and in-service support

Apply now or get in touch for further details.