Senior Product Security Practitioner — Relocation Included

baesystems; Barrow-in-Furness; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Relocation support

Job summary

BAE Systems in Barrow-in-Furness seeks a Principal Product Security Practitioner to lead security across submarine system development and delivery. You will apply your subject matter expertise to ensure cyber resilience in hostile environments, spanning embedded hardware, IT networks and OT systems.

The role requires advising on secure development practices, managing lifecycle security risks, and collaborating with safety engineers to ensure risk-aware interfaces.

Qualifications

• Degree or equivalent in STEM, Information Security, Cyber Security, or related discipline.
• Experience in Product Security, Information Assurance or Cyber Security in Critical National Infrastructure.
• Recognised Industry Security Qualifications such as CCP, CISSP, CISM (or able to achieve).
• Able to influence senior stakeholders by bridging technical engineering and cyber risk.

Responsibilities

• Assess product security across the lifecycle, identifying threats and advising secure development practices.
• Manage security risks and cyber resilience between IT & OT product families.
• Represent Product Security at Design Reviews with risk mitigation options to gain buy-in.
• Develop and maintain security architecture including requirements derivation and definition.
• Produce security deliverables: Security Strategies, Threat Assessments and Security Case artefacts.
• Collaborate with Safety Engineering to align cyber risk with safety considerations.

Skills

Product Security

Stakeholder influence

Cyber Security

Information Assurance

Education

Relevant STEM/InfoSec degree

Job description

BAE Systems in Barrow-in-Furness seeks a Principal Product Security Practitioner to lead security across submarine system development and delivery. You will apply your subject matter expertise to ensure cyber resilience in hostile environments, spanning embedded hardware, IT networks and OT systems.

The role requires advising on secure development practices, managing lifecycle security risks, and collaborating with safety engineers to ensure risk-aware interfaces.