Senior Product Security Engineer

RC Fornax; Luton; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

RC Fornax is seeking a Lead Product Security Engineer in Luton (Hybrid) to spearhead security across the product lifecycle. You will collaborate with engineering teams to define and implement security controls, produce security cases and assurance documentation, and support accreditation activities.

The role requires experience in regulated settings, knowledge of security frameworks, and the ability to produce technical security documentation. A strong MBSE understanding is desirable.

Qualifications

• Lead product security activities across the full product lifecycle.

Responsibilities

• Lead product security activities across the full product lifecycle, from concept and design through to deployment, maintenance and retirement.
• Conduct security risk assessments, threat analysis, risk mitigation planning and gap analysis activities.
• Produce security management plans, security cases, assurance documentation and supporting bid material.
• Define and derive product security requirements and work closely with engineering teams to implement appropriate security controls.
• Support system accreditation and assurance activities, liaising with internal stakeholders and external security authorities.

Job description

Job Title: Lead Product Security Engineer

Location: Luton (Hybrid)

Key Responsibilities

• Lead product security activities across the full product lifecycle, from concept and design through to deployment, maintenance and retirement.
• Conduct security risk assessments, threat analysis, risk mitigation planning and gap analysis activities.
• Produce security management plans, security cases, assurance documentation and supporting bid material.
• Define and derive product security requirements and work closely with engineering teams to implement appropriate security controls.
• Support system accreditation and assurance activities, liaising with internal stakeholders and external security authorities.

Requirements

• Experience delivering product security solutions within Defence, Government, Aerospace or highly regulated environments.
• Strong understanding of security risk assessment, security assurance and secure system design principles.
• Practical knowledge of recognised security standards and frameworks including ISO 27001, NIST, MOD Secure by Design, GovS 007 and JSP security policies.
• Experience producing technical security documentation such as Security Cases, Security Operating Procedures, Key Management Plans and Test Security Instructions.
• Knowledge of cryptographic technologies, key management systems and secure communications architectures.
• Knowledge of NATO security policy, accreditation and risk management frameworks.
• Understanding of Model Based Systems Engineering (MBSE) and its application to product security.